In Win2k this is what you can do. (maybe works on win2003 also)
If you know how to get to domain policies skip these steps
Open up AD Users and Computers.
Right click on either the Domain or the OU and select Properties. (Domain
will set the policy for all users)
Click on Domain Policy Tab
Click on Edit
In Group Policy Edit window
Drill down to Computer Configuration->Windows Settings->Security
Settings->Account Policies->Account Lockout Policy
After you set the settings and close out of the Policy MMC, refresh your
policy by typing
In Win2k this is what you can do. (maybe works on win2003 also)
If you know how to get to domain policies skip these steps
Open up AD Users and Computers.
Right click on either the Domain or the OU and select Properties. (Domain
will set the policy for all users)
You _must_ set Account Lockout policy at the domain level if you want it
to affect domain accounts. Setting it anywhere else will have absolutely
no effect on domain accounts. Same with Password Policies.
Click on Domain Policy Tab
Click on Edit
In Group Policy Edit window
Drill down to Computer Configuration->Windows Settings->Security
Settings->Account Policies->Account Lockout Policy
After you set the settings and close out of the Policy MMC, refresh your
policy by typing
In Domain Policy go to Computer
configuration......>Windows Settings..........>security
settings.......>Account policies.......>Account lockout
policies.
Click on that. On right hand side there are three options.
Click on Account lockout threshold. Set the login
attempts after which the account will be locked out.
Other have told you how to do it, but I would not recommend a setting of three. MS
recommends no less than ten as long as you take other measures to use secure
passwords such as enabling complexity. Due to the way the authentication process
works and that there can be multiple authentication protocols, you may experience
lockouts after one bad attempt even with a threshold set at five or so. Read the
account lockout white paper at the link below for more details. --- Steve
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.
