billrush2
asked on
SBS2003 Account Lockout
I am new to GPO and I would like to know how to change the SBS2003 GPO for Account Lockout. It is currently set to the default values (10 mins / 50 attempts). In MMC, it is not clear to me exactly what setting to modify to make this change. I would like this to apply to all PC's in the domain.
Bill
Bill
ASKER
KCTS,
What about Link Enabled and Enforced? What do these mean and does Enforced need to be set to Yes?
Also, how can I force these changes to take place immediately? Also there is a Lockout Policy with settings located under Group Policy Objects. What is this for? Do I need to change in both places?
Bill
What about Link Enabled and Enforced? What do these mean and does Enforced need to be set to Yes?
Also, how can I force these changes to take place immediately? Also there is a Lockout Policy with settings located under Group Policy Objects. What is this for? Do I need to change in both places?
Bill
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
kcts
when I run GPO result, it says that lockout poliy is among those not applied since it is being filtered out??
Bill
when I run GPO result, it says that lockout poliy is among those not applied since it is being filtered out??
Bill
Go to the Domain Security Policy
Change the "lockout threshold" to the number of attemps you want to allow
Change the "reset after" to the period in which you will count the attempts