Windows Account lockout Policy

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

ASKER

in your example you are saying the Lock out kicks in after 5 bad attempts.
you typed 3 wrong passwords then you typed the right password at the 4th attempt. at this stage the counter is set to 0.

This shoudld be the default, and I don't see that it will make sense if it was set up otherwise.

SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

ASKER

in our case is 15 minutes.

I don't understand the purpose of this setting <<Reset account lockout counter after>>
If the setting didn't exist at all what would as a security breach.??

SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

ASKER

I understand. it stores the number of your failed login attempts even after you succeded to login [as long as you didn't pass the threshold ]. and the number will be reset to 0 when the time of [Reset account lockout counter after] has expired.

It is just another Headache for the Administrators ..)

SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.