When one of our users attempts to log into OWA while their account is locked out, they receive a message stating that their username or password was incorrect. Is it possible to configure OWA so that it tells them if their account has been locked out?
No, possibly for security reasons. Users should not know that fact. Well, THE user may want to know, but the HACKER that tries to log in as the user should KNOW know that his password attempt was not rejected for a wrong password but because he got locked out.
Basic security 101 is to give the hacker as little information as possible.
|show 3 more comments|