Re: Account Lockout Policy

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 01/23/04 

Date: Thu, 22 Jan 2004 23:03:29 -0500

No this won't work because the policy isn't applied to the user objects, it
is applied to the domain object itself and the domain handles it. Check out
the following attributes of the domain partition (domainDNS object).

lockOutObservationWindow
lockoutDuration
lockoutThreshold 

-- 
www.joeware.net
"John M" <sdkfj@microsoft.com> wrote in message
news:%23ZrMQmS4DHA.2168@TK2MSFTNGP12.phx.gbl...
> there is no way to limit who gets the policy
> here is some info...
> Here are a few articles and whitepapers that will help you on your issue.
>
>
>
> Windows 2000 Group policy Whitepaper
>
>
>
>
http://www.microsoft.com/windows2000/techinfo/howitworks/management/grouppol
> wp.asp
>
>
> Account Lockout Whitepaper
>
>
>
http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=8c8e
> 0d90-a13b-4977-a4fc-3e2b67e3748e
>
>
>
> Troubleshooting Common Active Directory Setup Issues in Windows 2000
>
>
> http://support.microsoft.com/?kbid=260371
>
>
>
> The few white papers and tools
>
> http://support.microsoft.com/default.aspx?scid=KB;EN-US;255550
>
>
>
> http://support.microsoft.com/default.aspx?scid=KB;EN-US;259576
>
>
>
> http://support.microsoft.com/default.aspx?scid=KB;EN-US;299656
>
>
>
>
>
>
> "Clarence" <raven_2517@hotmail.com> wrote in message
> news:ekZfM5Q4DHA.3752@TK2MSFTNGP11.phx.gbl...
> > Since I'm unable to have different policies for Administrators and users
> > because the setting is domain-wide, what I'd like to do is deny the
> account
> > lockout on a group for our Service Accounts.
> >
> > I tried to add the security group to the Default Domain Policy and
checked
> > Deny on Apply Group Policy but it didn't work.
> >
> > Is there another way to get this to work?
> > Has anyone successfully had multiple account policies on one child
domain?
> >
> > Thanks.
> >
> >
>
>

Relevant Pages

  • Re: How can I prevent an account from being locked out?
    ... The security folks pick up on a published ... The lockout threshold is a good ... functionality for the domain ID you need a new domain with that policy. ... password or unlock their account ...
    (microsoft.public.windows.server.active_directory)
  • account lockout issues...
    ... I have a couple of question regarding the account lockout policy. ... I had originally set a local policy on our Win2K terminal server such ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Account Lockout Policy
    ... No this won't work because the policy isn't applied to the user objects, ... is applied to the domain object itself and the domain handles it. ... > Account Lockout Whitepaper ... >> lockout on a group for our Service Accounts. ...
    (microsoft.public.win2000.security)
  • Re: Account Lockout Policy
    ... the deny group policy is set on my Service Accounts, ... Do I have to block inheritance in the OU where the service accounts exist as ... >> Account Lockout Whitepaper ...
    (microsoft.public.windows.server.security)
  • Re: Account Lockout Policy
    ... the deny group policy is set on my Service Accounts, ... Do I have to block inheritance in the OU where the service accounts exist as ... >> Account Lockout Whitepaper ...
    (microsoft.public.windows.server.security)
Quantcast