Account Lockout Threshold

[@work&confused]

Having a problem with the application of group policies.

We have a default policy with the account lockout threshold set to 3
attempts. This policy applies to the entire domain.

We also have a generic user that gets used for a few kiosks, and don't
want that account to get locked out. We've created a new policy and
applied it to the OU containing the kiosks and the generic user name.
We set the account lockout threshold to 0, just like MS suggests, but
it still doesn't work. the account still gets locked out after 3
attempts.

Any suggestions?

 

[Danny Sanders]

Account policies are one to a domain. Account policies set at the OU level
take effect when logging on locally to a computer in that OU.

hth
DDS W 2k MVP MCSE

 

[Miha Pihler]

Hi,

Account Policies are only applied at domain level. You can apply them at OU
level, but they will be ignored by domain users. Only local computer users
will respect the policy set at OU level.

http://www.microsoft.com/resources/.../all/techref/en-us/w2k3tr_sepol_accou_set.asp

If you would like to set different account policies, you will have to create
new domain (e.g. child domain).

Mike