we have an application that will be published over the internet and we want to prevent our internal AD account from getting locked out. there are several options to use in this scenario
in considering our options i would like to know if it is possible to implement AD LDS with proxyuser objects and then limit the number of bind redirection attempts ADLDS does against the ADDS preventing the actual user account from ever getting locked out
by the application?
we also have radius authentication under consideration but implementing this would take a lot of modification to the application.
are there any other options we can consider to get the job done?