• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 659
  • Last Modified:

SBS2003 Account Lockout

I am new to GPO and I would like to know how to change the SBS2003 GPO for Account Lockout.  It is currently set to the default values (10 mins / 50 attempts).  In MMC, it is not clear to me exactly what setting to modify to make this change.  I would like this to apply to all PC's in the domain.

Bill
0
billrush2
Asked:
billrush2
  • 2
  • 2
1 Solution
 
KCTSCommented:
Just as well you want it to apply to all PCs in the domain - as there is no choice - passwords and account policies MUST apply at the domain level.

Go to the Domain Security Policy

Change the "lockout threshold" to the number of attemps you want to allow
Change the "reset after" to the period in which you will count the attempts

0
 
billrush2Author Commented:
KCTS,

What about Link Enabled and Enforced?  What do these mean and does Enforced need to be set to Yes?

Also, how can I force these changes to take place immediately?  Also there is a Lockout Policy with settings located under Group Policy Objects.  What is this for?  Do I need to change in both places?

Bill
0
 
KCTSCommented:
The link enabled mean that the GPO policy is linked to an object - such as an site, OU or DOMAIN, you need to make sure the policy is linked to the DOMAIN.

Enforced means that the policy is not allowed to be ignored or oeverridden by any subseqent policies that may specify different settings.

you need to run gpupdate /force to reresh the policy - it will then apply the next time a user attempts to log on.

The policy that you can see in the GPOs is the same policy - it just appear in a different place
0
 
billrush2Author Commented:
kcts

when I run GPO result, it says that lockout poliy is among those not applied since it is being filtered out??

Bill
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now