Strong passwords and user locking?

Hi,

I've been asked to force our users to use strong passwords with user
lockouts after a number of wrong attempts. So I started small and setup a
new OU and created a test user in it. I then created a goup policy,
associated it to my new OU and set the Account Lockout Threshold to 3, which
in turn set the duration and Reset Account Lockout Counter After to 30
minutes. The policy is linked to my OU and I'm filtering on Domain Users.

Now when I look at the settings of my group policy it doesn't show my
lockout settings and when I login as the test user it doesn't show this
policy in GPResults I've done a GPUPDATE but that didn't help. So what am
I missing? I suspect it's something obvious but I'm stumped once again.

Thanks in advance,
Linn


.

Relevant Pages

  • Re: OU group policy and how to use ldapsearch to find GPO settings
    ... To find the default domain policy settings, ... If I configure the account lockout policy in the default domain policy, ...
    (microsoft.public.windows.group_policy)
  • RE: 529 Logon Failures - 138 Events
    ... I am using complex passwords....I have not configured the lockout feature. ... Can I configure a lockout policy for the server itself? ... If I lock the server will I be able to unlock it to do maintenance? ... Configure account lockout policy. ...
    (microsoft.public.windows.server.sbs)
  • Re: Strong passwords and user locking?
    ... policy, associated it to my new OU and set the Account Lockout ... Lockout Counter After to 30 minutes. ... lockout settings and when I login as the test user it doesn't show this ...
    (microsoft.public.windows.server.security)
  • Re: Service Accounts & Account Lock out Policy
    ... Also I would say that 5 bads is extremely low and will likely be counterproductive and cause you more issues than it is worth. ... If you set the policy as low as 25 with a five minute lockout reset this should be more than adequate to prevent brute force attacks and not completely piss off your users when they fat finger. ... I don't want to this policy to apply to the Service accounts used by the applications as it will lock-out the service account and will stop it. ...
    (microsoft.public.security)
  • Unable to change Windows 2000 Account Lockout Policy
    ... Domain Security Policy active with an Account Lockout Policy. ... This policy is set to an Account Lockout treshold of 5. ...
    (microsoft.public.win2000.group_policy)