Re: Undo Account Lockout Policy GPO

Tech-Archive recommends: Fix windows errors by optimizing your registry



adfind is a free tool from joeware.net and is downloadable there

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"vdz" <vdz@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0E3B561B-9EC3-45EC-80EB-3D069819BAA3@xxxxxxxxxxxxxxxx
Thank you Jorge.
I did issue gpudate /force and restart the server. but it still denied to
work :(.
I also issued the adfind command, but unfortunately it did nor recognize
this command.

any other suggestions? thanks a lot

Cheers

"Jorge de Almeida Pinto [MVP - DS]" wrote:

when configured within the default domain GPO the GPO should be applied
to
the DCs after max 5 minutes

do a GPUPDATE /FORCE

post the output of: adfind -default -s base

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"vdz" <vdz@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:55543FEB-321A-40EC-8172-241867042A6B@xxxxxxxxxxxxxxxx
Hi all

Sorry to bother you all again. As I reset this policy to the new
setting
10
days ago,

FROM

Account Lockout duration - 30 minutes
Account Lockout threshold - 5 invalid logon attemps
Reset account lockout after count - 30 minutes

TO

Account Lockout duration - 2 minutes
Account Lockout threshold - 10 invalid logon attemps
Reset account lockout after count - 2 minutes

But it does not take effect at all. Or should I wait a bit longer?.
Please
adivise

Thank you very much

Cheers







.



Relevant Pages

  • Re: Undo Account Lockout Policy GPO
    ... I'm stumped how is the adfind dump going to help out? ... Account Lockout threshold - 5 invalid logon attemps ... Reset account lockout after count - 30 minutes ... Account Lockout threshold - 10 invalid logon attemps ...
    (microsoft.public.windows.server.active_directory)
  • Re: Undo Account Lockout Policy GPO
    ... I also issued the adfind command, but unfortunately it did nor recognize ... Account Lockout threshold - 5 invalid logon attemps ... Reset account lockout after count - 30 minutes ... Account Lockout threshold - 10 invalid logon attemps ...
    (microsoft.public.windows.server.active_directory)
  • Re: Undo Account Lockout Policy GPO
    ... when configured within the default domain GPO the GPO should be applied to the DCs after max 5 minutes ... Account Lockout threshold - 5 invalid logon attemps ... Reset account lockout after count - 30 minutes ... Account Lockout threshold - 10 invalid logon attemps ...
    (microsoft.public.windows.server.active_directory)
  • Re: Undo Account Lockout Policy GPO
    ... Account Lockout threshold - 5 invalid logon attemps ... Reset account lockout after count - 30 minutes ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Always test ANY suggestion in a test environment before implementing! ...
    (microsoft.public.windows.server.active_directory)
  • Re: Undo Account Lockout Policy GPO
    ... Account Lockout duration - Not defined ... Reset account lockout after count - Not defined. ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Always test ANY suggestion in a test environment before implementing! ...
    (microsoft.public.windows.server.active_directory)