Local Lockout Policy and NT4

[Guest]

I have a Windows XP Pro laptop user that needs to have his account lock after
5 attempts. The user is logging into a NT4 domain, and when he travels he
logs into the cached profile with his standard username and domain. Our NT4
server has been setup to lock the account after 5 failed attempts, and I have
changed the local policy on his laptop to lock the account after 5 attempts.

What happens is that when you take the laptop off the network, you can log
in 5 times, the 6th time you have to wait for about 2 minutes, then you can
continue to attempt to log in as many times as you want. Is there a way to
lock out the account on the laptop after 5 failed attempts?

Any help with this would be greatly appreciated.

Thanks,

Tim

 

[Guest]

It appears that the account lockout policy will apply to local users, but it
will not apply to NT 4.0 cached users. Is this an issues with NT 4 vs. Win
XP? Does the behaviour change going to Active Directory?

Anyone's assistance with this is greatly appreciated.

Thanks,

Tim