Enable Account Lockout Policy

Account Lockout Policy determines the number of failed logon attempts that causes a user account to be locked out. A locked-out account cannot be used until it is reset by an administrator or until the lockout duration for the account has expired. You can set a value between 0 and 999 failed logon attempts. If you set the value to 0, the account will never be locked out. Default is 0.

Enable Account Lockout Policy

1. Logon on to Domain Controller as administrator, open Group Policy Management Console by typing Windows Key+R, then gpmc.msc as shown below.

Enable Account Lockout Policy

2. Expand Forest –> Expand Domains –> Expand k2schools.com –> Right Click on Default Policy and select Edit as show below

Enable Account Lockout Policy1

3. Expand Computer Configuration –> Expand Policies –> Expand Windows Settings –> Expand Security Settings –> Expand Account Policies –> Click on Account Lockout Policy.

Enable Account Lockout Policy2

4. Double Click on Account lockout threshold.

Enable Account Lockout Policy3

5. Enter the value for Number of invalid logon attempts(Example: 3)

Enable Account Lockout Policy4

6. Close the Group Policy Management Console and run gpupdate /force to effect changes immmediately.

Powered by k2schools