Re: Win2K - Account Lockout Policy

From: Chadi (Chadi@trinec.com)
Date: 11/28/02 

From: "Chadi" <Chadi@trinec.com>
Date: Thu, 28 Nov 2002 11:22:34 +0200

actually the lock out account policy is part of the account policy
and the effective account policy must be set on the domain level not on the
client local level
so you need to check the domain security policies on the domain controller
and then correct it to the appropriate settings under account policies
then wait for the refresh policy to occur (which is 90 minutes by default),
or restart the machine

good luck

"Matt" <mhall@advantagepersonnel.com.au> wrote in message
news:n9gF9.57$N5.1515@nasal.pacific.net.au...
> A W2K client should be able to view the local security policy. The
effective
> settings for the policy should come down from the domain controller. Try
> matching the local settings with the effective domain settings (you will
> have to have admin rights)
>
> "Kerry Hoskin" <kjho@pml.ac.uk> wrote in message
> news:e$N7IqrfCHA.2700@tkmsftngp09...
> > what client PC's are your running?? I have seen this kind of problem
with
> > win9.x clients when running the AD client software on the PC's
> >
> > Kerry
> >
> > "Subhodini Fernandes" <subhfern@yahoo.com> wrote in message
> > news:49c0d836.0210280850.6247fea9@posting.google.com...
> > > I have a large Win2K domain and users are complaining about that fact
> > > that the account get locked out after 1 incorrect attempt, even though
> > > the policy is set for 3 incorrect attempts.
> > > From a Windows 2000 client is it possible to get the account
> > > lockout policy for my user account ? I need to find out the max number
> > > of incorrect logins before which my account gets locked out.
> > >
> > > Thanks,
> > > Subhodini.
> >
> >
>
>

Relevant Pages

  • Re: Win2K - Account Lockout Policy
    ... actually the lock out account policy is part of the account policy ... and the effective account policy must be set on the domain level not on the ... > A W2K client should be able to view the local security policy. ... > settings for the policy should come down from the domain controller. ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: Account policy works only at domain level
    ... That is by design and one of the few settings that do not work like other GP ... account policy can only be configured at the domain level ...
    (microsoft.public.win2000.group_policy)
  • Re: Kerberos User Ticket Lifetime
    ... I always wonder whether we can create 2 GPOs with diifferent account policy, ... groups to the appropriate GPO so that they will get the right settings. ... >> Maximum User Ticket Lifetime at a userid level, or only at the domain level ... >> with the Maximum User Ticket Lifetime parm? ...
    (microsoft.public.security)
  • password policy bypass on stand-alone system
    ... password on a stand-alone system even if the Security ... Settings - Account Policy - Password Settings are set for ... users from the Admin Tools, but does not work if you add ...
    (microsoft.public.win2000.security)
  • Re: Account policy works only at domain level
    ... > That is by design and one of the few settings that do not work like other ... account policy can only be configured at the ... >> I've tried to create an account policy for limit password change limits ...
    (microsoft.public.win2000.group_policy)