Re: Strong passwords and user locking?



Thanks for the help Anthony. But man, that means it's all or nothing, I
can't even test this before forcing it on everyone? I don't like that a
bit.

Thanks,
Linn

"Anthony [MVP]" <anthony@xxxxxxxxxxxx> wrote in message
news:OqjNu4EeIHA.5552@xxxxxxxxxxxxxxxxxxxxxxx
You need to set the account policy in the root of the domain.
There's a good article about it here:
http://technet2.microsoft.com/windowsserver/en/library/cda0eee3-a52e-4c1b-a9d7-0c70f122ada91033.mspx?mfr=true
and here:
http://technet2.microsoft.com/windowsserver/en/library/b04678d1-510f-48d3-8d10-dce2e61972d71033.mspx?mfr=true
Hope that helps,
Anthony
http://www.airdesk.co.uk


"Linn Kubler" <lkubler@xxxxxxxxxxxxxxxxxx> wrote in message
news:%23EbkLlAeIHA.5548@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

I've been asked to force our users to use strong passwords with user
lockouts after a number of wrong attempts. So I started small and setup
a new OU and created a test user in it. I then created a goup policy,
associated it to my new OU and set the Account Lockout Threshold to 3,
which in turn set the duration and Reset Account Lockout Counter After to
30 minutes. The policy is linked to my OU and I'm filtering on Domain
Users.

Now when I look at the settings of my group policy it doesn't show my
lockout settings and when I login as the test user it doesn't show this
policy in GPResults I've done a GPUPDATE but that didn't help. So what
am I missing? I suspect it's something obvious but I'm stumped once
again.

Thanks in advance,
Linn





.



Relevant Pages

  • Re: Strong passwords and user locking?
    ... expires, or you set it to be changed at next logon, so you can introduce it ... which in turn set the duration and Reset Account Lockout Counter After ... The policy is linked to my OU and I'm filtering on ... lockout settings and when I login as the test user it doesn't show this ...
    (microsoft.public.windows.server.security)
  • Re: Strong passwords and user locking?
    ... policy, associated it to my new OU and set the Account Lockout ... Lockout Counter After to 30 minutes. ... lockout settings and when I login as the test user it doesn't show this ...
    (microsoft.public.windows.server.security)
  • Re: Strong passwords and user locking?
    ... You need to set the account policy in the root of the domain. ... which in turn set the duration and Reset Account Lockout Counter After to ... lockout settings and when I login as the test user it doesn't show this ...
    (microsoft.public.windows.server.security)
  • Strong passwords and user locking?
    ... in turn set the duration and Reset Account Lockout Counter After to 30 ... The policy is linked to my OU and I'm filtering on Domain Users. ... lockout settings and when I login as the test user it doesn't show this ...
    (microsoft.public.windows.server.security)
  • Re: GPO causing client security logs to fill?
    ... titled "Client Logon Failure". ... This was done in the Group Policy ... So basically, the Account lockout threshold, account lockout duration ... When you do clean boot on the client computer, ...
    (microsoft.public.windows.server.sbs)