Re: Limit number of Logon attempts

In group policies the settings are in: Computer Configuration | Windows
Settings | Security Settings | Account Policies | Account Lockout
Policy.

The policy will be applied according to where the GPO is linked in the
AD hierarchy. I guess in theory you could use GPO Security Filtering to
restrict who it's applied to, but I have never done that. The built-in
Administrator account cannot be locked out.

-- Owen Williams

In article <OMHR8J$kGHA.1936@xxxxxxxxxxxxxxxxxxxx>,
bob.massey@xxxxxxxxxxxxxxxxxxxxxx says...
Running SBS2003 Standard. I know there is a setting for the max number of
logon attempts prior to locking individuals out. But I have been unable to
find it. Could someone point me to the location. Is it global only or can
you set it by user? i.e. Admin account etc.

Thanks,

Bob
.

Relevant Pages

  • Re: Rename administrator account policy affects domain admin user account
    ... I can't disable the policy in the Default Domain Controller GPO. ... As for why a Domain Administrator account is a ...
    (microsoft.public.win2000.group_policy)
  • Re: Framework Config Security
    ... "Nicole Calinoiu" wrote: ... Can you tell me where the administrator account is and briefly what to ... I love that idea about the GPO or Login Script. ... you create a CAS policy ...
    (microsoft.public.dotnet.framework)
  • Re: cmd line tool
    ... Kathy ... >> We need to change the administrator account name and password on all ... >>> I never tried without a script or a GPO to make that happen. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Applying GPO in W2K3 and W2K8 - Admin Question
    ... have you logged on using local Administrator account? ... you linked that GPO) ... The policy is applyed to users in that group. ... I tested then OU applying the Security Filtering to Authenticated ...
    (microsoft.public.windows.server.active_directory)
  • Re: 1000 errors "..cannot access gpt.ini file"
    ... Renaming the administrator account is OK, but you should not have deleted ... > GPO and created a new blank one. ... > I cannot open the domain security policy - getting an error "The ...
    (microsoft.public.win2000.active_directory)