Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. FIX: Soft lockout does not apply if Outlook Anywhere uses KCD for SSO to Exchange Server

FIX: Soft lockout does not apply if Outlook Anywhere uses KCD for SSO to Exchange Server

View products that this article applies to.

Symptoms

You configure Microsoft Forefront Unified Access Gateway (UAG) 2010 to perform a soft lockout on a user after several failed authentication tries. If you also configure Microsoft Outlook Anywhere to use Kerberos Constrained Delegation (KCD) for Single Sign-On (SSO) access to Microsoft Exchange Server, you find that the soft lockout process does not apply.

In this configuration, Outlook authenticates to UAG by using NTLM authentication.

↑ Back to the top

Cause

This problem occurs because the "Integrated Windows Authentication" handler in UAG does not check the account lockout status correctly.

↑ Back to the top

Resolution

This problem is fixed in Rollup 1 for Microsoft Forefront Unified Access Gateway 2010 Service Pack 4 (SP4).

↑ Back to the top

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top

References

Learn about the terminology that Microsoft uses to describe software updates.

↑ Back to the top

Keywords: kbqfe, kbfix, kbnotautohotfix, kbexpertiseinter, kbsurveynew, kbbug, kb

↑ Back to the top

Article Info
Article ID : 3006938
Revision : 1
Created on : 1/7/2017
Published on : 10/28/2014
Exists online : False
Views : 296