«

In have my web.config set up so that after three invalid login attempts, the
user account will be locked out

maxInvalidPasswordAttempts="3"
passwordAttemptWindow="10"

This all works fine. If I want the account to be enabled after a specific
period of time has past, do I need to call the unlock method, based off the
time span between the FailedPasswordAttemptWindowStart time and the current
time?

--
Ken S

Yes. there is no automatic unlock feature - you have to do that yourself.

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

> In have my web.config set up so that after three invalid login
> attempts, the user account will be locked out
>
> maxInvalidPasswordAttempts="3"
> passwordAttemptWindow="10"
> This all works fine. If I want the account to be enabled after a
> specific period of time has past, do I need to call the unlock method,
> based off the time span between the FailedPasswordAttemptWindowStart
> time and the current time?
>