Re: Account Lockout Threshold change - Not taking effect

Hello sekhar,

Where did you configure the policy, on domain level in Default domain policy or equivalent?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


We have mix of Windows 2003 and 2000 DCs. The Account lockout
threshold was initially set for 3. We later changed it to 5. Now the
account is getting locked in 3 attempts and not in 5. It has
replicated to all the DC. In the DC it is showing as 5, but it is
still locking at 3. When I ran the RSOP on the computer it shows as 5,
when I ran the "Net Account" it shows as 5. But, it always locks at 3
attempt. Change done 3 days back. Any thoughts on this? Should I
reboot the DCs?



.

Relevant Pages

  • Re: Password expiration
    ... Open GPMC and edit a policy which set at the domain level, normally Default domain policy. ... Disclaimer: This posting is provided "AS IS" with no warranties, ...
    (microsoft.public.windows.server.security)
  • Re: Account Lockout Threshold change - Not taking effect
    ... The GPO (Default Domain Policy) that has the account lockout setting of 5 is ... Are you saying the GPO ... linked at the domain level, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password restriction in forest
    ... the Default domain policy (or a policy at the ... domain level higher than the default domain policy) is where the ... changes have to be made on a per domain level. ... Is there a way to do this at the forest level or do I need to go change ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account Lockout Threshold change - Not taking effect
    ... Are you saying the GPO with the 5 attempts setting is not linked at the domain level, but rather it is liniked on an OU somewhere, such as where the Users OU is? ... will have to remove the settings in the Default Domain Policy and not change ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account Lockout Threshold change - Not taking effect
    ... Default domain Policy level. ... We have another policy set in different OU for 3 ... Where did you configure the policy, on domain level in Default domain policy ... when I ran the "Net Account" it shows as 5. ...
    (microsoft.public.windows.server.active_directory)
Loading