Account Policies

Account policies enable the system administrator to control the user accounts. Using an account policy, the administrator can:

> Set the account lockout duration - Specifies the time after which the account will be locked

> Set the account lockout threshold - Specifies the number of invalid attempts to login to the domain

>Reset the account lockout count - Specifies to restart the account lockout count

To view account policies:

1. Open Active Directory Users and Computers. The Active Directory Users and Computers console appears.

2. Select the domain controller name.

3. Select Action -> Properties. The Properties dialog box appears.

4. Click the Group Policy tab. The Group Policy tab appears.

5. Select the Default Domain Policy.

6. Click Edit. The Group Policy Object Editor console appears.

7. Expand Windows Settings under Computer Configuration.

8. Expand Security Settings under Windows Settings.

9. Expand Account Policies under Security Settings.

10. Click Account Lockout Policy. The Account Lockout Policy appears.

The different account policies that appear in the Account Lockout Policy are:

> Account lockout duration - Specifies the time after which the account is locked out

> Account lockout threshold - Specifies the number of incorrect attempts, the user can make, before the account is locked

> Reset account lockout count after - Specifies to enable default settings for the account lockout policy.

To set Account Lockout Duration:

1. Open the Group Policy Object Editor console. The Group Policy Object Editor console appears.

2. Expand Windows Settings under Computer Configuration.

3. Expand Security Settings under Windows Settings.

4. Expand Account Policies under Security Settings.

5. Click Account Lockout Policy. The Account Lockout Policy appears.

6. Double-click Account lockout duration. The Account lockout duration Properties dialog box appears.

7. Select the Define this policy setting check box. The minutes spin box is enabled.

8. Enter the time in the minutes spin box.

9. Click Apply.

10. Click OK.

To set Account Lockout Threshold:

1. Open the Group Policy Object Editor console. The Group Policy Object Editor console appears.

2. Expand Windows Settings under Computer Configuration.

3. Expand Security Settings under Windows Settings.

4. Expand Account Policies under Security Settings.

5. Click Account Lockout Policy. The Account Lockout Policy appears.

6. Double-click Account lockout threshold. The Account lockout threshold Properties dialog box appears.

7. Select the Define this policy setting check box.

8. Enter the value in the invalid logon attempts spin box.

9. Click Apply.

10. Click OK.

To reset the Account Lockout Count:

1. Open the Group Policy Object Editor console. The Group Policy Object Editor console appears.

2. Expand Windows Settings under Computer Configuration.

3. Expand Security Settings under Windows Settings.

4. Expand Account Policies under Security Settings.

5. Click Account Lockout Policy. The Account Lockout Policy appears.

6. Double-click Reset account lockout count after. The Reset account lockout count after Properties dialog box appears.

7. Select the Define this policy setting check box. The minutes spin box is enabled.

8. Enter the time in the minutes spin box.

9. Click Apply.

10. Click OK.