PC Review


Reply
Thread Tools Rate Thread

Account Lockout Trouble

 
 
Cell
Guest
Posts: n/a
 
      24th May 2004
Hi

I have a W2K server and a few W2K Pro machines together in a domain.
It's a small home lab for learning purposes. I created a new OU and added
specific users, also one of the W2K Pro machines.
I then created a new policy for this
OU, which included "hide all desktop icons" amongst others. I also enabled
the account lockout policy, to lock out users after 2 failed attempts. This
is
the one that I can't seem to get working. Regardless of how many failed
login
attempts I try with the user, the account never locks out. Is there
something
else I have to do ontop on what I've already done

I've checked over Microsoft site and followed, all instructions on creating
Policies, also
been through my study book. Anyone help me out

Thank You


 
Reply With Quote
 
 
 
 
Ken
Guest
Posts: n/a
 
      24th May 2004
I'm pretty sure the account lock out policy is like the
password policy--can only be set thru the domain default
policy. It appears in OU policies, but is not effective.

Ken


>-----Original Message-----
>Hi
>
>I have a W2K server and a few W2K Pro machines together

in a domain.
>It's a small home lab for learning purposes. I created a

new OU and added
>specific users, also one of the W2K Pro machines.
>I then created a new policy for this
>OU, which included "hide all desktop icons" amongst

others. I also enabled
>the account lockout policy, to lock out users after 2

failed attempts. This
>is
>the one that I can't seem to get working. Regardless of

how many failed
>login
>attempts I try with the user, the account never locks

out. Is there
>something
>else I have to do ontop on what I've already done
>
>I've checked over Microsoft site and followed, all

instructions on creating
>Policies, also
>been through my study book. Anyone help me out
>
>Thank You
>
>
>.
>

 
Reply With Quote
 
Cell
Guest
Posts: n/a
 
      24th May 2004
Hi Ken

Yeah seems your right, I tested it out and it worked fine when applied
through domain default policy.
Anyone know if theres a way around this, to apply it to specific users only?

Thanks Again
"Ken" <(E-Mail Removed)> wrote in message
news:118d701c441be$4b2eda90$(E-Mail Removed)...
> I'm pretty sure the account lock out policy is like the
> password policy--can only be set thru the domain default
> policy. It appears in OU policies, but is not effective.
>
> Ken
>
>
> >-----Original Message-----
> >Hi
> >
> >I have a W2K server and a few W2K Pro machines together

> in a domain.
> >It's a small home lab for learning purposes. I created a

> new OU and added
> >specific users, also one of the W2K Pro machines.
> >I then created a new policy for this
> >OU, which included "hide all desktop icons" amongst

> others. I also enabled
> >the account lockout policy, to lock out users after 2

> failed attempts. This
> >is
> >the one that I can't seem to get working. Regardless of

> how many failed
> >login
> >attempts I try with the user, the account never locks

> out. Is there
> >something
> >else I have to do ontop on what I've already done
> >
> >I've checked over Microsoft site and followed, all

> instructions on creating
> >Policies, also
> >been through my study book. Anyone help me out
> >
> >Thank You
> >
> >
> >.
> >



 
Reply With Quote
 
Steven L Umbach
Guest
Posts: n/a
 
      25th May 2004
There is no workaround for any domain user. Configuring a different account policy at
the OU level will apply only to local users on the computers in that OU. --- Steve


"Cell" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi Ken
>
> Yeah seems your right, I tested it out and it worked fine when applied
> through domain default policy.
> Anyone know if theres a way around this, to apply it to specific users only?
>
> Thanks Again
> "Ken" <(E-Mail Removed)> wrote in message
> news:118d701c441be$4b2eda90$(E-Mail Removed)...
> > I'm pretty sure the account lock out policy is like the
> > password policy--can only be set thru the domain default
> > policy. It appears in OU policies, but is not effective.
> >
> > Ken
> >
> >
> > >-----Original Message-----
> > >Hi
> > >
> > >I have a W2K server and a few W2K Pro machines together

> > in a domain.
> > >It's a small home lab for learning purposes. I created a

> > new OU and added
> > >specific users, also one of the W2K Pro machines.
> > >I then created a new policy for this
> > >OU, which included "hide all desktop icons" amongst

> > others. I also enabled
> > >the account lockout policy, to lock out users after 2

> > failed attempts. This
> > >is
> > >the one that I can't seem to get working. Regardless of

> > how many failed
> > >login
> > >attempts I try with the user, the account never locks

> > out. Is there
> > >something
> > >else I have to do ontop on what I've already done
> > >
> > >I've checked over Microsoft site and followed, all

> > instructions on creating
> > >Policies, also
> > >been through my study book. Anyone help me out
> > >
> > >Thank You
> > >
> > >
> > >.
> > >

>
>



 
Reply With Quote
 
Cell
Guest
Posts: n/a
 
      25th May 2004
Ok guys, thanks a lot for that.


"Steven L Umbach" <(E-Mail Removed)> wrote in message
news:_jwsc.18634$hi6.1872208@attbi_s53...
> There is no workaround for any domain user. Configuring a different

account policy at
> the OU level will apply only to local users on the computers in that

U. --- Steve
>
>
> "Cell" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > Hi Ken
> >
> > Yeah seems your right, I tested it out and it worked fine when applied
> > through domain default policy.
> > Anyone know if theres a way around this, to apply it to specific users

only?
> >
> > Thanks Again
> > "Ken" <(E-Mail Removed)> wrote in message
> > news:118d701c441be$4b2eda90$(E-Mail Removed)...
> > > I'm pretty sure the account lock out policy is like the
> > > password policy--can only be set thru the domain default
> > > policy. It appears in OU policies, but is not effective.
> > >
> > > Ken
> > >
> > >
> > > >-----Original Message-----
> > > >Hi
> > > >
> > > >I have a W2K server and a few W2K Pro machines together
> > > in a domain.
> > > >It's a small home lab for learning purposes. I created a
> > > new OU and added
> > > >specific users, also one of the W2K Pro machines.
> > > >I then created a new policy for this
> > > >OU, which included "hide all desktop icons" amongst
> > > others. I also enabled
> > > >the account lockout policy, to lock out users after 2
> > > failed attempts. This
> > > >is
> > > >the one that I can't seem to get working. Regardless of
> > > how many failed
> > > >login
> > > >attempts I try with the user, the account never locks
> > > out. Is there
> > > >something
> > > >else I have to do ontop on what I've already done
> > > >
> > > >I've checked over Microsoft site and followed, all
> > > instructions on creating
> > > >Policies, also
> > > >been through my study book. Anyone help me out
> > > >
> > > >Thank You
> > > >
> > > >
> > > >.
> > > >

> >
> >

>
>



 
Reply With Quote
 
Mark Renoden [MSFT}
Guest
Posts: n/a
 
      31st May 2004
A little extra info that might be useful can be found in the following
whitepaper. It covers recommended configuration as well as troubleshooting
tools and methods:

http://www.microsoft.com/technet/pro.../bpactlck.mspx

Kind regards
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (E-Mail Removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.

"Cell" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Ok guys, thanks a lot for that.
>
>
> "Steven L Umbach" <(E-Mail Removed)> wrote in message
> news:_jwsc.18634$hi6.1872208@attbi_s53...
>> There is no workaround for any domain user. Configuring a different

> account policy at
>> the OU level will apply only to local users on the computers in that

> U. --- Steve
>>
>>
>> "Cell" <(E-Mail Removed)> wrote in message
>> news:(E-Mail Removed)...
>> > Hi Ken
>> >
>> > Yeah seems your right, I tested it out and it worked fine when applied
>> > through domain default policy.
>> > Anyone know if theres a way around this, to apply it to specific users

> only?
>> >
>> > Thanks Again
>> > "Ken" <(E-Mail Removed)> wrote in message
>> > news:118d701c441be$4b2eda90$(E-Mail Removed)...
>> > > I'm pretty sure the account lock out policy is like the
>> > > password policy--can only be set thru the domain default
>> > > policy. It appears in OU policies, but is not effective.
>> > >
>> > > Ken
>> > >
>> > >
>> > > >-----Original Message-----
>> > > >Hi
>> > > >
>> > > >I have a W2K server and a few W2K Pro machines together
>> > > in a domain.
>> > > >It's a small home lab for learning purposes. I created a
>> > > new OU and added
>> > > >specific users, also one of the W2K Pro machines.
>> > > >I then created a new policy for this
>> > > >OU, which included "hide all desktop icons" amongst
>> > > others. I also enabled
>> > > >the account lockout policy, to lock out users after 2
>> > > failed attempts. This
>> > > >is
>> > > >the one that I can't seem to get working. Regardless of
>> > > how many failed
>> > > >login
>> > > >attempts I try with the user, the account never locks
>> > > out. Is there
>> > > >something
>> > > >else I have to do ontop on what I've already done
>> > > >
>> > > >I've checked over Microsoft site and followed, all
>> > > instructions on creating
>> > > >Policies, also
>> > > >been through my study book. Anyone help me out
>> > > >
>> > > >Thank You
>> > > >
>> > > >
>> > > >.
>> > > >
>> >
>> >

>>
>>

>
>



 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Account lockout duration=30 minutes, however account remains locked indefinitely. Marlon Brown Microsoft Windows 2000 Security 5 20th Nov 2004 04:04 AM
lockout account Dandou Microsoft Windows 2000 Group Policy 1 23rd Jul 2004 05:11 PM
exclude admin account from account lockout policy =?Utf-8?B?UGludHU=?= Microsoft Windows 2000 Active Directory 2 3rd Dec 2003 04:32 AM
Disable Account Lockout on a per account basis Donald Houston Microsoft Windows 2000 Active Directory 1 14th Oct 2003 05:02 PM
Account lockout iris Microsoft Windows 2000 Active Directory 1 12th Sep 2003 06:27 PM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 09:00 PM.