ASP.NET 2.0 Membership - How to disable Automatic Account Lockouts

[Jaans]

A very cool feature of the ASP.NET 2.0 membership provider includes the
automatic "lockout" of users after repeated failed login attempts.

I have a scenario where we don't want this to happen, so how do I disable
the automatic lockout of users ?

Thanks

[Chris Fulstow]

Don't see any obvious way to disable it. Maybe you could set
passwordAttemptWindow="0"?

[Steven Cheng[MSFT]]

Hi Jaans,

I agree with Chris that the default SqlMembershipProvider doesn't expose
the configuration to let us disable the account lockout. All the available
setting on the provider are in the public properties expoesd by the class:

#SqlMembershipProvider Properties
http://msdn2.microsoft.com/en-us/library/8d54517e.aspx

Also, currently what we can configure on the default provider is enlarge
the login attempt count or rate through the

MaxInvalidPasswordAttempts and MaxInvalidPasswordAttempts property.

Hope this helps.

Regards,

Steven Cheng
Microsoft Online Community Support
==================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)