228 Rockwell Automation Publication 5069-UM002A-EN-P - January 2019
Chapter 10 Commercial Operating System
Account Lockout Settings
To help maintain a degree of security, an account on the COS can be locked.
Table 20 describes some of the account lockout policies.
For more information on the Account Lockout Policy in the Microsoft
Security Baseline for Windows 10 v1607, see
https://docs.microsoft.com/en-
us/windows/device-security/security-policy-settings/account-lockout-policy.
Network Settings
The X1 port lets the COS connect to an EtherNet/IP network. Table 21
describes some of the Network policies.
For more information on the Microsoft Security Baseline for Windows 10
v1607 policies, see the following:
• Local account access over network policy -
https://docs.microsoft.com/
en-us/windows/device-security/security-policy-settings/deny-access-to-
this-computer-from-the-network
• Windows Firewall policy -
https://docs.microsoft.com/en-us/
windows/access-protection/windows-firewall/windows-firewall-with-
advanced-security-design-guide
Table 20 - COS Account Lockout Policies
Policy Description
Password use to unlock account An account is locked after 10 failed attempts to log in.
Access to a locked account The following apply:
• Once an account is locked, you can attempt to log in to the account after
15 minutes.
• A system administrator can manually unlock the account for a general
user before 15 minutes expire.
Table 21 - COS Network Policies
Policy Description
Local account access over network Local accounts are denied permission to log on to the module over the
network.
Windows Firewall Windows Firewall policy that is managed by local policy.