L1 BIO 16.01 ISO A.12.4.1 CIS 18.9.19.2

Reset Account Lockout Counter Nadat Is Set To 15 Of Meer Minute S

📅 2025-10-30
•
⏱️ 2 minuten lezen
•
🔴 Must-Have

💼 Management Samenvatting

Deze security regelen waarborgt de correcte configuratie van beveiligingsinstellingen op Windows endpoints.

Aanbeveling
IMPLEMENT
Risico zonder
High
Risk Score
7/10
Implementatie
2u (tech: 1u)
Van toepassing op:
✓ Windows

Deze instelling is onderdeel van de Windows security baseline en beschermt tegen bekende aanvalsvectoren door het afdwingen van veilige configuraties.

PowerShell Modules Vereist
Primary API: Graph
Connection: Connect-MgGraph
Required Modules: Microsoft.Graph.DeviceManagement

Implementatie

Dit regelen configureert reset account lockout counter nadat is set to 15 of meer minute s via Microsoft Intune apparaat configuratie beleid of compliance policies om Windows endpoints te beveiligen volgens security best practices.

Vereisten

Microsoft Intune via device configuratiebeleidsregels

Implementatie

Gebruik PowerShell-script reset-account-lockout-counter-after-is-set-to-15-or-more-minute-s.ps1 (functie Invoke-Implementation) – Implementeren.

Gebruik PowerShell-script reset-account-lockout-counter-after-is-set-to-15-or-more-minute-s.ps1 (functie Invoke-Monitoring) – Monitoren.

monitoring

Gebruik PowerShell-script reset-account-lockout-counter-after-is-set-to-15-or-more-minute-s.ps1 (functie Invoke-Monitoring) – Controleren.

Remediatie

Gebruik PowerShell-script reset-account-lockout-counter-after-is-set-to-15-or-more-minute-s.ps1 (functie Invoke-Remediation) – Herstellen.

Compliance en Auditing

Beleid documentatie

Compliance & Frameworks

Automation

Gebruik het onderstaande PowerShell script om deze security control te monitoren en te implementeren. Het script bevat functies voor zowel monitoring (-Monitoring) als remediation (-Remediation).

PowerShell
<# ================================================================================ POWERSHELL SCRIPT - Nederlandse Baseline voor Veilige Cloud ================================================================================ .SYNOPSIS Reset Account Lockout Counter nadat Is Set To 15 of meer Minute S .DESCRIPTION Implementeert, monitort en herstelt: Reset Account Lockout Counter nadat Is Set To 15 of meer Minute S .NOTES Filename: reset-account-lockout-counter-after-is-set-to-15-or-more-minute-s.ps1 Author: Nederlandse Baseline voor Veilige Cloud Version: 1.0 Workload: intune Category: security-options #> #Requires -Version 5.1 [CmdletBinding()] param() $ErrorActionPreference = 'Stop' function Invoke-Implementation { <# .SYNOPSIS Implementeert de configuratie #> [CmdletBinding()] param() Write-Host "[INFO] Invoke-Implementation - Reset Account Lockout Counter nadat Is Set To 15 of meer Minute S" -ForegroundColor Cyan Invoke-Remediation } function Invoke-Monitoring { <# .SYNOPSIS Controleert de huidige configuratie status #> [CmdletBinding()] param() try { Write-Host " ========================================" -ForegroundColor Cyan Write-Host "Reset Account Lockout Counter nadat Is Set To 15 of meer Minute S - Monitoring" -ForegroundColor Cyan Write-Host "========================================" -ForegroundColor Cyan # TODO: Implementeer monitoring logica voor Reset Account Lockout Counter nadat Is Set To 15 of meer Minute S Write-Host "[INFO] Monitoring check voor Reset Account Lockout Counter nadat Is Set To 15 of meer Minute S" -ForegroundColor Yellow Write-Host "[OK] Monitoring check completed" -ForegroundColor Green } catch { Write-Error "Monitoring failed: $_" throw } } function Invoke-Remediation { <# .SYNOPSIS Herstelt de configuratie naar de gewenste staat #> [CmdletBinding()] param() try { Write-Host " ========================================" -ForegroundColor Cyan Write-Host "Reset Account Lockout Counter nadat Is Set To 15 of meer Minute S - Remediation" -ForegroundColor Cyan Write-Host "========================================" -ForegroundColor Cyan # TODO: Implementeer remediation logica voor Reset Account Lockout Counter nadat Is Set To 15 of meer Minute S Write-Host "[INFO] Remediation voor Reset Account Lockout Counter nadat Is Set To 15 of meer Minute S" -ForegroundColor Yellow Write-Host "[OK] Remediation completed" -ForegroundColor Green } catch { Write-Error "Remediation failed: $_" throw } }

Risico zonder implementatie

Risico zonder implementatie
High: No auth tracking.

Management Samenvatting

Schakel in audit logging.