Definition Type: Element
Name: lockoutpolicy_test
Namespace: http://oval.mitre.org/XMLSchema/oval#windows
Type: oval:standardTestType
Containing Schema: windows-schema.xsd
Abstract
Documentation:
The lockoutpolicy test enumerates various attributes associated with lockout information for users and global groups in the security database.
Collapse XSD Schema Diagram:
Drilldown into data in schema windows-schema_xsd Drilldown into notes in schema oval-schema_xsd Drilldown into comment in schema oval-schema_xsd Drilldown into id in schema oval-schema_xsd Drilldown into testType in schema oval-schema_xsd Drilldown into check in schema oval-schema_xsd Drilldown into standardTestType in schema oval-schema_xsdXSD Diagram of lockoutpolicy_test in schema windows-schema_xsd (Open Vulnerability and Assessment Language (OVAL®))
Collapse XSD Schema Code:
<xsd:element name="lockoutpolicy_test" substitutionGroup="oval:test">
    <xsd:annotation>
        <xsd:documentation>The lockoutpolicy test enumerates various attributes associated with lockout information for users and global groups in the security database.</xsd:documentation>
        <xsd:appinfo>
            <test_name>Lockout Policy Test</test_name>
            <extends>standardTestType</extends>
            <valid_sections>notes, data</valid_sections>
            <example>
                <lockoutpolicy_test id="wlt-0" check="all" comment="specific lockout policies are set" xmlns="http://oval.mitre.org/XMLSchema/oval#windows">
                    <oval:notes xmlns:oval="http://oval.mitre.org/XMLSchema/oval">
                        <oval:note>This is an example test written under version 4 of the OVAL schema.  It is meant to give a short overview of the test and might not contain every possible child element.</oval:note>
                    </oval:notes>
                    <data operation="AND">
                        <force_logoff datatype="int">60</force_logoff>
                        <lockout_duration datatype="int">30</lockout_duration>
                        <lockout_observation_window datatype="int">5</lockout_observation_window>
                        <lockout_threshold datatype="int">3</lockout_threshold>
                    </data>
                </lockoutpolicy_test>
            </example>
        </xsd:appinfo>
    </xsd:annotation>
    <xsd:complexType>
        <xsd:complexContent>
            <xsd:extension base="oval:standardTestType">
                <xsd:sequence>
                    <xsd:element name="data" minOccurs="0" maxOccurs="1">
                        <xsd:complexType>
                            <xsd:complexContent>
                                <xsd:extension base="oval:dataType">
                                    <xsd:sequence>
                                        <xsd:element name="force_logoff" type="oval:subtestIntType" minOccurs="0" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>Specifies, in seconds, the amount of time between the end of the valid logon time and the time when the user is forced to log off the network. A value of TIMEQ_FOREVER indicates that the user is never forced to log off. A value of zero indicates that the user will be forced to log off immediately when the valid logon time expires.  See the USER_MODALS_INFO_0 structure returned by a call to NetUserModalsGet().</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_test>Lockout Policy Test</parent_test>
                                                    <cardinality>0-1</cardinality>
                                                    <content>integer</content>
                                                    <valid_datatypes>integer</valid_datatypes>
                                                    <valid_operators>equals, not equal, greater than, less than, greater than or equal, less than or equal</valid_operators>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="lockout_duration" type="oval:subtestIntType" minOccurs="0" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>Specifies, in seconds, how long a locked account remains locked before it is automatically unlocked.  See the USER_MODALS_INFO_3 structure returned by a call to NetUserModalsGet().</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_test>Lockout Policy Test</parent_test>
                                                    <cardinality>0-1</cardinality>
                                                    <content>integer</content>
                                                    <valid_datatypes>integer</valid_datatypes>
                                                    <valid_operators>equals, not equal, greater than, less than, greater than or equal, less than or equal</valid_operators>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="lockout_observation_window" type="oval:subtestIntType" minOccurs="0" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>Specifies the maximum time, in seconds, that can elapse between any two failed logon attempts before lockout occurs.  See the USER_MODALS_INFO_3 structure returned by a call to NetUserModalsGet().</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_test>Lockout Policy Test</parent_test>
                                                    <cardinality>0-1</cardinality>
                                                    <content>integer</content>
                                                    <valid_datatypes>integer</valid_datatypes>
                                                    <valid_operators>equals, not equal, greater than, less than, greater than or equal, less than or equal</valid_operators>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                        <xsd:element name="lockout_threshold" type="oval:subtestIntType" minOccurs="0" maxOccurs="1">
                                            <xsd:annotation>
                                                <xsd:documentation>Specifies the number of invalid password authentications that can occur before an account is marked "locked out."  See the USER_MODALS_INFO_3 structure returned by a call to NetUserModalsGet().</xsd:documentation>
                                                <xsd:appinfo>
                                                    <parent_test>Lockout Policy Test</parent_test>
                                                    <cardinality>0-1</cardinality>
                                                    <content>integer</content>
                                                    <valid_datatypes>integer</valid_datatypes>
                                                    <valid_operators>equals, not equal, greater than, less than, greater than or equal, less than or equal</valid_operators>
                                                </xsd:appinfo>
                                            </xsd:annotation>
                                        </xsd:element>
                                    </xsd:sequence>
                                </xsd:extension>
                            </xsd:complexContent>
                        </xsd:complexType>
                    </xsd:element>
                </xsd:sequence>
            </xsd:extension>
        </xsd:complexContent>
    </xsd:complexType>
</xsd:element>
Collapse Child Elements:
Name Type Min Occurs Max Occurs
notes oval:notes 0 1
data windows:data 0 1
Collapse Child Attributes:
Name Type Default Value Use
id oval:id Required
comment oval:comment Required
check oval:check all Optional
Collapse Derivation Tree:
Collapse References:
oval:test