Admin User and Lockouts

[jmair]

Where can I go to change how often a user gets locked out in Group Policies. I have a user account (two of them) that are admin and often have several remotes to other machines at the same time. These accounts are getting locked out, but where in GP can I change this?

[MYK-IT]

The Account Lockout Policy is located within the Default Domain Policy.

 

Computer Configuration

Windows Settings

Account Policies

Account Lockout Policy

 

It's usually best practice to limit changes to the Default Domain Policy, and use additional GPOs instead for any other / additional changes etc.

 

If the account is getting locked out, that would indicate a bad password being entered repeatedly within the set lockout duration.

 

Upto Windows 2008 (if i remember correctly, but definitely up to Windows 2003 R2) this policy will affect all user accounts (inc Admins) but with Windows 2008 R2 you can have different Account Lockout Policies affecting different Users, Groups or OUs etc.

Edited August 17, 2010 by MYK-IT

[jmair]

I'm wondering if part of the problem could be that I'm also logged into a samaba share. But we're getting locked out very often (every 10-20 min).. I've made a new OU for the Admin accounts and removed inheritable policies and changed the account lock out policy to 99 login attempts to see if that's what is causing the lockouts. I'll post results in a bit. Thanks for the help MYK-IT.

 

 

***

yep.. Changing the login attempts fixed the issue. I can only guess that samba also has something to do with it unless somebody else has been trying to lock out my account constantly for the last week. Thanks again MYK-IT

Edited August 17, 2010 by jmair

[littlehoughton]

Download lockoutstatus.exe from Download details: Account Lockout and Management Tools and run that util.

 

If its effecting only 2 accounts have you tried creating a brand new admin account and using that? what happens?