Re: Account Lockout Threshold change - Not taking effect

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hello sekhar,

Account lockout and password policy must be configured on domain level with OS version earlier then 2008. On OU they will not work for domain machines.

Please run gpresult /v or rsop.msc on the client to see which settings are displayed.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Default domain Policy level. We have another policy set in different
OU for 3 attmepts. That is not applied for all users.

"Meinolf Weber [MVP-DS]" wrote:

Hello sekhar,

Where did you configure the policy, on domain level in Default domain
policy or equivalent?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
We have mix of Windows 2003 and 2000 DCs. The Account lockout
threshold was initially set for 3. We later changed it to 5. Now the
account is getting locked in 3 attempts and not in 5. It has
replicated to all the DC. In the DC it is showing as 5, but it is
still locking at 3. When I ran the RSOP on the computer it shows as
5, when I ran the "Net Account" it shows as 5. But, it always locks
at 3 attempt. Change done 3 days back. Any thoughts on this? Should
I reboot the DCs?



.

Relevant Pages