Solved

how to check the account lockout counter?

Posted on 2016-10-09
6
76 Views
Last Modified: 2016-10-14
how to check the account lockout counter?
what is the path in the windows 2003, 2008 servers?
0
Comment
Question by:satheesh kumar
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 15

Accepted Solution

by:
cwstad2 earned 500 total points
ID: 41835915
Hi see the following path in the gpo editor for both server 2003/2008

In Group Policy Object Links, click Default Domain Policy or create and name your Group Policy object, and then click Edit.

Computer Configuration\Windows Settings\Security Settings\Account Policies\Account Lockout Policy
0
 
LVL 14

Expert Comment

by:Justin Yeung
ID: 41835941
Hi Author,

Do you want to set? or check?

The counter is based on an Attribute badpwdcount.
0
 
LVL 6

Expert Comment

by:Leon Teale
ID: 41836199
Use powershell, Get-ADDefaultDomainPasswordPolicy,

----------


In addition to the standard Lightweight Directory Access Protocol (LDAP) attributes, you can retrieve the following extended properties of the Get-ADDefaultDomainPasswordPolicy cmdlet by using the -Properties parameter:

    ComplexityEnabled

    LockoutDuration

    LockoutObservationWindow

    LockoutThreshold

    MaxPasswordAge

    MinPasswordAge

    MinPasswordLength

    PasswordHistoryCount

    ReversibleEncryptionEnabled

For a full explanation of the parameters that you can pass to Get-ADDefaultDomainPasswordPolicy, at the Active Directory module command prompt, type Get-Help Get-ADDefaultDomainPasswordPolicy –detailed, and then press ENTER.
0
Salesforce Made Easy to Use

On-screen guidance at the moment of need enables you & your employees to focus on the core, you can now boost your adoption rates swiftly and simply with one easy tool.

 
LVL 40

Expert Comment

by:Adam Brown
ID: 41836332
The lockout timer determined by subtracting the lockout-time attribute that is written to the AD account at the time the user is locked out from the current time and comparing it with the lockout windows policy setting. If the result is less than the policy, the account remains locked out. Otherwise, the account is unlocked at login. The actual timer is not stored anywhere. It's just a value determined at login.
0
 
LVL 12

Expert Comment

by:Ajit (Kevin k)
ID: 41841878
Please refer to below links might helps you to get in more detailed:

https://technet.microsoft.com/en-us/library/cc775412(v=ws.10).aspx

https://technet.microsoft.com/en-us/library/hh994568(v=ws.11).aspx

Hope this helps!
0
 

Author Closing Comment

by:satheesh kumar
ID: 41844145
Nice solution
0

Featured Post

MIM Survival Guide for Service Desk Managers

Major incidents can send mastered service desk processes into disorder. Systems and tools produce the data needed to resolve these incidents, but your challenge is getting that information to the right people fast. Check out the Survival Guide and begin bringing order to chaos.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question