Re: Undo Account Lockout Policy GPO

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



I should be more specific....

do the GPUPDATE /FORCE on the DC with the PDC FSMO

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"vdz" <vdz@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:0E3B561B-9EC3-45EC-80EB-3D069819BAA3@xxxxxxxxxxxxxxxx
Thank you Jorge.
I did issue gpudate /force and restart the server. but it still denied to
work :(.
I also issued the adfind command, but unfortunately it did nor recognize
this command.

any other suggestions? thanks a lot

Cheers

"Jorge de Almeida Pinto [MVP - DS]" wrote:

when configured within the default domain GPO the GPO should be applied to
the DCs after max 5 minutes

do a GPUPDATE /FORCE

post the output of: adfind -default -s base

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"vdz" <vdz@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:55543FEB-321A-40EC-8172-241867042A6B@xxxxxxxxxxxxxxxx
> Hi all
>
> Sorry to bother you all again. As I reset this policy to the new > setting
> 10
> days ago,
>
> FROM
>
> Account Lockout duration - 30 minutes
> Account Lockout threshold - 5 invalid logon attemps
> Reset account lockout after count - 30 minutes
>
> TO
>
> Account Lockout duration - 2 minutes
> Account Lockout threshold - 10 invalid logon attemps
> Reset account lockout after count - 2 minutes
>
> But it does not take effect at all. Or should I wait a bit longer?. > Please
> adivise
>
> Thank you very much
>
> Cheers
>
>
>



.



Relevant Pages

  • Re: Undo Account Lockout Policy GPO
    ... do the GPUPDATE /FORCE on the DC with the PDC FSMO ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Always test ANY suggestion in a test environment before implementing! ... Account Lockout threshold - 5 invalid logon attemps ...
    (microsoft.public.windows.server.active_directory)
  • Re: Undo Account Lockout Policy GPO
    ... objectClass: domainDNS ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Always test ANY suggestion in a test environment before implementing! ... Account Lockout threshold - 5 invalid logon attemps ...
    (microsoft.public.windows.server.active_directory)
  • Re: Undo Account Lockout Policy GPO
    ... I want to see if the PWD settings are indeed applied to the domain NC head where the info is actually stored! ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Always test ANY suggestion in a test environment before implementing! ... Account Lockout threshold - 5 invalid logon attemps ...
    (microsoft.public.windows.server.active_directory)
  • Re: Undo Account Lockout Policy GPO
    ... Account Lockout threshold - 5 invalid logon attemps ... Reset account lockout after count - 30 minutes ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Always test ANY suggestion in a test environment before implementing! ...
    (microsoft.public.windows.server.active_directory)
  • Re: Infrastructure FSMO role owner attibute not correct in root do
    ... I connected to the infrastructure FSMO role holder for the root ... I don't know i that was the real "fix" or just a coincidence or not though. ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Always test ANY suggestion in a test environment before implementing! ...
    (microsoft.public.windows.server.active_directory)