Export (0) Print
Expand All

Set the number of sign-in failures before a voice mail user Is locked out

 

Applies to: Exchange Server 2013, Exchange Online

Topic Last Modified: 2013-02-22

You can configure the number of sign-in failures allowed before an Outlook Voice Access user is locked out of their mailbox. The number of sign-in failures allowed before a voice mail user is locked out is configured on a Unified Messaging (UM) mailbox policy, and applies to all UM-enabled users associated with the UM mailbox policy. By default it is set to 15.

To increase security, decrease the maximum number of failed attempts. However, remember that if you decrease it to a number much lower than the default, users may be locked out unnecessarily. Unified Messaging will generate warning events you can view using Event Viewer if PIN authentication fails for UM-enabled users or if users are unsuccessful when they try to sign in to the system. This setting must be larger than the setting for the number of sign-in failures before the PIN is reset.

For additional tasks related to Outlook Voice Access PIN security, see PIN security procedures.

  • Estimated time to complete: Less than 1 minute.

  • You need to be assigned permissions before you can perform this procedure or procedures. To see what permissions you need, see the "UM mailbox policies" entry in the Unified Messaging permissions topic.

  • Before you perform these procedures, confirm that a UM dial plan has been created. For detailed steps, see Create a UM dial plan.

  • Before you perform these procedures, confirm that a UM mailbox policy has been created. For detailed steps, see Create a UM mailbox policy.

  • For information about keyboard shortcuts that may apply to the procedures in this topic, see Keyboard shortcuts in the Exchange admin center.

TipTip:
Having problems? Ask for help in the Exchange forums. Visit the forums at: Exchange Server, Exchange Online, or Exchange Online Protection..

  1. In the EAC, navigate to Unified Messaging > UM dial plans.

  2. In the list view, select the UM dial plan you want to change, and then click Edit Edit icon.

  3. On the UM dial plan page, under UM Mailbox Policies, select the UM mailbox policy you want to change, and then click Edit Edit icon.

  4. Click PIN policies, and next to Number of sign-in failures before lockout, enter a value between 1 and 999.

  5. Click Save.

This example sets the maximum number sign-in attempts to 10 for UM-enabled users who are associated with a UM mailbox policy named MyUMMailboxPolicy.

Set-UMMailboxPolicy -Identity MyUMMailboxPolicy -MaxLogonAttempts 10

This example sets the number of sign-in failures before the Outlook Voice Access user's PIN is reset to 3, the maximum number of sign-in attempts to 5, and a minimum PIN length to 9 for UM-enabled users who are associated with a UM mailbox policy named MyUMMailboxPolicy.

Set-UMMailboxPolicy -Identity MyUMMailboxPolicy -LogonFailuresBeforePINReset 3
-MaxLogonAttempts 5 -MinPINLength 9
 
Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft