Skip to main content

Microsoft just gave you a great way to fight Windows brute-force attacks

As ransomware attacks continue to surge, Microsoft has taken a major step toward closing off one of the common methods of gaining unauthorized access to Windows computers. Known as brute-force attacks, repeated attempts are made at guessing the login password on one or more computers in a network.

Microsoft announced today that account lockout is available for local administrators in the latest cumulative update for Windows. This will automatically enable account lockout for new machines set up on Windows 11, version 22H2, as well as any new machine that gets the October 11, 2022 Windows cumulative update.

Microsoft Security logo appears in the corner of a scene with IT workers at computers
Image used with permission by copyright holder

For existing computers, the administrator of the computer needs to enable Allow Administrator account lockout policy under Local Computer Policy/Computer Configuration/Windows Settings/Security Settings/Account Policies/Account Lockout Policies in order to add this extra layer of protection.

Brute-force attacks are particularly concerning since little needs to be known about the system or its users to randomly cycle through common passwords and attempt to gain access. Hackers can even breach computers with a barrage of passwords sent over Windows Remote desktop protocol.

Bleeping Computer first spotted the news and noted that Microsoft also announced that more complex passwords will be required for local admin accounts. As with many online services, a mix of uppercase and lowercase letters, numbers, and symbols will be needed for this type of account. This is a critical step since the administrator has access to every file on the computer, even system files.

As hacking efforts continue to accelerate, it’s important to close every possible weakness. Account lockout after 10 failed attempts seems like a very good and common-sense security measure that probably should have been implemented long ago.

Editors' Recommendations

Alan Truly
Computing Writer
Alan is a Computing Writer living in Nova Scotia, Canada. A tech-enthusiast since his youth, Alan stays current on what is…
Best router deals: Save on mesh networks and Wi-Fi 6 routers
The Netgear Nighthawk AXE11000 Tri-Band Wi-Fi 6E Router on a table.

Strangely enough, routers have had a huge technological bump in the last few years due to the number of devices that need to be connected to the internet. That's one of the main aspects of the new Wi-Fi 6, a standard that not only increases speeds and quality of the connection but addresses the issue with ten devices or more needing to connect to the internet constantly without impacting quality. To that end, if you haven't upgraded your router or mesh network in three to five or more years but are increasingly buying more smart-home products, grabbing a modern router with the latest technology is probably a good idea.

Best Router Deals

Read more
Intel says AMD’s Ryzen 7000 is snake oil
AMD CEO Lisa Su holding an APU chip.

In what is one of the most bizarrely aggressive pieces of marketing material I've seen, Intel is comparing AMD's Ryzen 7000 mobile chips to snake oil. Over the weekend, Intel posted its Core Truths playbook, which lays out how AMD's mobile processor naming scheme misleads customers.

There's an element of truth to that, which I'll get to in a moment, but first, the playbook. Intel starts with claiming that there's a "long history of selling half-truths to unsuspecting customers" alongside images of a snake oil salesman and a suspicious used car seller. This sets up a comparison between the Ryzen 5 7520U and the Core i5-1335U. Intel's chip is 83% faster, according to the presentation, due to the older architecture that AMD's part uses.

Read more
Don’t miss these deals on the Meta Quest 2 and Meta Quest Pro
A model poses with a Meta Quest Pro over a colorful background.

Meta isn’t just the parent company of Facebook, it’s also become a pioneer in the new wave of virtual reality. It has a lineup of virtual reality headsets to shop, and a couple of them are seeing deals today. Both the Meta Quest 2 and the Meta Quest Pro have their price dropped at Best Buy, with the more affordable Quest 2 seeing a sale price of $250 and the high-end Quest Pro discounted to $924. Best Buy is including free shipping with a purchase of either VR headset.
Meta Quest 2 VR headset — $250, was $300

The Meta Quest 2 isn’t the newest Meta Quest on the market, but it holds up really well when it comes to offering an immersive virtual experience. It has a super fast process and a high resolution display, both of which manage to handle the strains of virtual reality processing. The experience remains seamless and smooth even with more current software. If you want something brand new, the Meta Quest 3 is on the market, but both the Meta Quest 3 and Quest 2 offer total immersion with 3D positional audio, hand tracking, and haptic feedback that makes virtual worlds feel real. With the Meta Quest 2 you can explore more than 250 software titles across categories like gaming, fitness, socials and entertainment.

Read more