Guest pete0085 Posted November 9, 2007 Posted November 9, 2007 I am trying to confgure account lockout on the local machine (Windows and Server 2000) and it's not taking affect as I think it should. I went to run, gpedit.msc, account policies, account lockout. Lockout duration is set to 30 minutes, 5 invalid attempts, reset after 30. The local and effective setting are the same. I am using the local administrator account on these machines. We do have a gpo setting for all machines on the domain through the default domain policy. A recently internal audit indicated 4 machines have a zero lockout policy and all 4 machines are either windows 2000 or server 2000. I have tried to lock myself out and been unable to do so. Any ideas of why I am unable to do so???
Guest Ryan Hanisco Posted November 10, 2007 Posted November 10, 2007 RE: account lock out Hi Pete, So, you are saying that the domain default policy is handling the lockout policies for the domain accounts and you are trying to use the local security policy to lock down the handling of local account on those machines? If you have one that is working, I would suggest that you use the security configuration MMC and export the security settings. You can then import using secedit. -- Ryan Hanisco MCSE, MCTS: SQL 2005, Project+ http://www.techsterity.com Chicago, IL Remember: Marking helpful answers helps everyone find the info they need quickly. "pete0085" wrote: > I am trying to confgure account lockout on the local machine (Windows and > Server 2000) and it's not taking affect as I think it should. > > I went to run, gpedit.msc, account policies, account lockout. Lockout > duration is set to 30 minutes, 5 invalid attempts, reset after 30. > > The local and effective setting are the same. I am using the local > administrator account on these machines. We do have a gpo setting for all > machines on the domain through the default domain policy. A recently > internal audit indicated 4 machines have a zero lockout policy and all 4 > machines are either windows 2000 or server 2000. > > I have tried to lock myself out and been unable to do so. > > Any ideas of why I am unable to do so???
Recommended Posts