SBS2003 Account Lockout

Posted on 2007-10-05
Last Modified: 2008-12-16
I am new to GPO and I would like to know how to change the SBS2003 GPO for Account Lockout.  It is currently set to the default values (10 mins / 50 attempts).  In MMC, it is not clear to me exactly what setting to modify to make this change.  I would like this to apply to all PC's in the domain.

Question by:billrush2
    LVL 70

    Expert Comment

    Just as well you want it to apply to all PCs in the domain - as there is no choice - passwords and account policies MUST apply at the domain level.

    Go to the Domain Security Policy

    Change the "lockout threshold" to the number of attemps you want to allow
    Change the "reset after" to the period in which you will count the attempts


    Author Comment


    What about Link Enabled and Enforced?  What do these mean and does Enforced need to be set to Yes?

    Also, how can I force these changes to take place immediately?  Also there is a Lockout Policy with settings located under Group Policy Objects.  What is this for?  Do I need to change in both places?

    LVL 70

    Accepted Solution

    The link enabled mean that the GPO policy is linked to an object - such as an site, OU or DOMAIN, you need to make sure the policy is linked to the DOMAIN.

    Enforced means that the policy is not allowed to be ignored or oeverridden by any subseqent policies that may specify different settings.

    you need to run gpupdate /force to reresh the policy - it will then apply the next time a user attempts to log on.

    The policy that you can see in the GPOs is the same policy - it just appear in a different place

    Author Comment


    when I run GPO result, it says that lockout poliy is among those not applied since it is being filtered out??


    Featured Post

    What Security Threats Are You Missing?

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Join & Write a Comment

    Because virtualization becomes more and more common, and, with Microsoft Hyper-V included in Windows Server at no additional costs, and, most server hardware nowadays is more than capable of running a physical Small Business Server (SBS) 2008 or 201…
    I work for a company that primarily works with small businesses as their outsourced IT vendor. As such the majority of these customers utilize some version of Small Business Server. Due to the economics of running a small business, many of these cus…
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now