Link to home
Start Free TrialLog in
Avatar of billrush2
billrush2

asked on

SBS2003 Account Lockout

I am new to GPO and I would like to know how to change the SBS2003 GPO for Account Lockout.  It is currently set to the default values (10 mins / 50 attempts).  In MMC, it is not clear to me exactly what setting to modify to make this change.  I would like this to apply to all PC's in the domain.

Bill
Avatar of Brian Pierce
Brian Pierce
Flag of United Kingdom of Great Britain and Northern Ireland image

Just as well you want it to apply to all PCs in the domain - as there is no choice - passwords and account policies MUST apply at the domain level.

Go to the Domain Security Policy

Change the "lockout threshold" to the number of attemps you want to allow
Change the "reset after" to the period in which you will count the attempts

Avatar of billrush2
billrush2

ASKER

KCTS,

What about Link Enabled and Enforced?  What do these mean and does Enforced need to be set to Yes?

Also, how can I force these changes to take place immediately?  Also there is a Lockout Policy with settings located under Group Policy Objects.  What is this for?  Do I need to change in both places?

Bill
ASKER CERTIFIED SOLUTION
Avatar of Brian Pierce
Brian Pierce
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
kcts

when I run GPO result, it says that lockout poliy is among those not applied since it is being filtered out??

Bill