account lock out

  • Thread starter Thread starter pete0085
  • Start date Start date
P

pete0085

Guest
I am trying to confgure account lockout on the local machine (Windows and
Server 2000) and it's not taking affect as I think it should.

I went to run, gpedit.msc, account policies, account lockout. Lockout
duration is set to 30 minutes, 5 invalid attempts, reset after 30.

The local and effective setting are the same. I am using the local
administrator account on these machines. We do have a gpo setting for all
machines on the domain through the default domain policy. A recently
internal audit indicated 4 machines have a zero lockout policy and all 4
machines are either windows 2000 or server 2000.

I have tried to lock myself out and been unable to do so.

Any ideas of why I am unable to do so???
 
RE: account lock out

Hi Pete,

So, you are saying that the domain default policy is handling the lockout
policies for the domain accounts and you are trying to use the local security
policy to lock down the handling of local account on those machines?

If you have one that is working, I would suggest that you use the security
configuration MMC and export the security settings. You can then import
using secedit.
--
Ryan Hanisco
MCSE, MCTS: SQL 2005, Project+
http://www.techsterity.com
Chicago, IL

Remember: Marking helpful answers helps everyone find the info they need
quickly.


"pete0085" wrote:

> I am trying to confgure account lockout on the local machine (Windows and
> Server 2000) and it's not taking affect as I think it should.
>
> I went to run, gpedit.msc, account policies, account lockout. Lockout
> duration is set to 30 minutes, 5 invalid attempts, reset after 30.
>
> The local and effective setting are the same. I am using the local
> administrator account on these machines. We do have a gpo setting for all
> machines on the domain through the default domain policy. A recently
> internal audit indicated 4 machines have a zero lockout policy and all 4
> machines are either windows 2000 or server 2000.
>
> I have tried to lock myself out and been unable to do so.
>
> Any ideas of why I am unable to do so???
 
Back
Top