Re: What's the difference



"" wrote:
> What is the distinction between
>
> Account lockout duration and Reset account lockout counter
> after
>
> i think that is the same thing
>
> why

no they are not!

"Account lockout duration" means: when the account lockout threshold
has been reached lock the account for the amount of time configured

"Reset account lockout counter after" means: until reaching the
account lockout threshold a DC counts the number of bad login attempts
and increases the count with 1 when a bad attempt occurs. If more than
the value of time configured passes between two bad login attempts the
account lockout counter is reset to 0 (zero)

as you can see.. there is a difference!

Cheers,

--
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Active-Directory-difference-ftopict551419.html
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1747126
.



Relevant Pages

  • Re: Undo Account Lockout Policy GPO
    ... Account Lockout threshold - 5 invalid logon attemps ... Reset account lockout after count - 30 minutes ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Always test ANY suggestion in a test environment before implementing! ...
    (microsoft.public.windows.server.active_directory)
  • Re: Undo Account Lockout Policy GPO
    ... Account Lockout duration - Not defined ... Reset account lockout after count - Not defined. ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Always test ANY suggestion in a test environment before implementing! ...
    (microsoft.public.windows.server.active_directory)
  • Re: Undo Account Lockout Policy GPO
    ... Account Lockout threshold - Not defined ... Reset account lockout after count - Not defined. ... Account Lockout threshold - 5 invalid logon attemps ... Now if you were to go into your gpo ...
    (microsoft.public.windows.server.active_directory)
  • Re: Undo Account Lockout Policy GPO
    ... I also issued the adfind command, but unfortunately it did nor recognize ... Account Lockout threshold - 5 invalid logon attemps ... Reset account lockout after count - 30 minutes ... Account Lockout threshold - 10 invalid logon attemps ...
    (microsoft.public.windows.server.active_directory)
  • Re: Undo Account Lockout Policy GPO
    ... I'm stumped how is the adfind dump going to help out? ... Account Lockout threshold - 5 invalid logon attemps ... Reset account lockout after count - 30 minutes ... Account Lockout threshold - 10 invalid logon attemps ...
    (microsoft.public.windows.server.active_directory)