Re: AD accounts not being unlocked when "lockout duration" setting rea

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 10/22/04 

Date: Fri, 22 Oct 2004 16:28:55 GMT

Don't know offhand. When you run the " net accounts " command on the domain
controller does it show 15 minutes for the lockout duration? --- Steve

"PSmith2112" <PSmith2112@discussions.microsoft.com> wrote in message
news:6383B2FB-2A4F-4CDA-AEAC-77147BC263A5@microsoft.com...
> Our default domain account lockout policy is set like this:
>
> Lockout Threshold - 4 attempts
> Lockout Duration - 15 minutes
> Reset Counter After - 5 minutes
>
> User accounts are being locked out correctly when the threshold is met,
> but
> they are NOT being unlocked when the lockout duration period is reached.
> Once locked out, user accounts are staying locked out until they are
> manually
> unlocked.
>
> Nothing obvious in the event logs. Any ideas?
>
> Thanks,
> Paul

Relevant Pages