Re: Password lockout for users
From: Paul Adare - MVP - Microsoft Virtual PC (padare_at_newsguy.com)
Date: 03/24/04
- Next message: damned: "Re: Wich protocol numbers?"
- Previous message: cristina: "external transative trusts between domains"
- In reply to: Dave: "Re: Password lockout for users"
- Next in thread: Pradeep: "Password lockout for users"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 24 Mar 2004 17:57:18 -0500
In article <uVxniJfEEHA.3672@TK2MSFTNGP09.phx.gbl>, in the
microsoft.public.win2000.security news group, Dave <none@none.com>
says...
> You have to do it through Group Policy.
>
> In Win2k this is what you can do. (maybe works on win2003 also)
>
> If you know how to get to domain policies skip these steps
> Open up AD Users and Computers.
> Right click on either the Domain or the OU and select Properties. (Domain
> will set the policy for all users)
You _must_ set Account Lockout policy at the domain level if you want it
to affect domain accounts. Setting it anywhere else will have absolutely
no effect on domain accounts. Same with Password Policies.
> Click on Domain Policy Tab
> Click on Edit
>
> In Group Policy Edit window
> Drill down to Computer Configuration->Windows Settings->Security
> Settings->Account Policies->Account Lockout Policy
>
> After you set the settings and close out of the Policy MMC, refresh your
> policy by typing
>
> secedit /refreshpolicy machine_policy /enforce
This only works for Windows 2000. For XP and 2003 the command is
gpupdate /force.
>
> at a command line
>
> Dave
>
>
>
-- Paul Adare Moral indignation is jealousy with a halo. H. G. Wells, The Wife of Sir Isaac Harman
- Next message: damned: "Re: Wich protocol numbers?"
- Previous message: cristina: "external transative trusts between domains"
- In reply to: Dave: "Re: Password lockout for users"
- Next in thread: Pradeep: "Password lockout for users"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
