Re: Accounts lockout policy not working as expected

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Nathan H (anonymous_at_discussions.microsoft.com)
Date: 07/14/04 

Date: Wed, 14 Jul 2004 16:06:20 +0100

Hi Janet

> On the "Default Domain Policy" I have the following set:
>
> Account Lockout Duration: 15 minutes
> Account Lockout Threshold: 5 bad logon attempts
> Reset Account Lockout counter: 10 minutes
>
> If someone enters 5 bad passwords their account indeed becomes locked out,
> but the account never automatically unlocks again. It always has to be
> manually unlocked no matter how long I wait. How can I get the account to
> automatically unlock itself?

ahhh...someone with similar lockout problems....see my post on it called:

User log on lock out policy does not function correctly in 2003

I forgot that this happens also to me.....once locked out, they stay locked
out too :(

Here though, they only have to get it wrong (or in some cases, even when
getting
it right) once for it to lock them out permanently.

Regards and please post if you find anything out. 

-- 
Nathan Harmsworth
IT / Network Administrator
Ysgol Bro Ddyfi (Edu)

Relevant Pages

  • Accounts lockout policy not working as expected
    ... Account Lockout Threshold: 5 bad logon attempts ... Reset Account Lockout counter: 10 minutes ... but the account never automatically unlocks again. ...
    (microsoft.public.windows.group_policy)
  • Re: FBA and account lockouts
    ... I have set an account lockout on our domain and checked every level under it ... but it won't lock an account out after x amount of incorrect logons. ... page logon as it does to any other logon. ...
    (microsoft.public.exchange.setup)
  • Re: Whats the difference
    ... > Account lockout duration and Reset account lockout counter ... "Account lockout duration" means: ... "Reset account lockout counter after" means: ...
    (microsoft.public.win2000.active_directory)
  • RE: Account Policy
    ... > when the account lockout threshold is define, the lock out duration and reset ... > account lockout counter after will function.But i cant change it ...
    (microsoft.public.windows.server.active_directory)
  • Account Policy
    ... when the account lockout threshold is define, the lock out duration and reset ... account lockout counter after will function.But i cant change it ...
    (microsoft.public.win2000.active_directory)