Account Lockout Threshold for Invalid Logon Attempts

Page 1 of 2 12 LastLast
    Account Lockout Threshold for Invalid Logon Attempts

    Account Lockout Threshold for Invalid Logon Attempts

    How to Set Account Lockout Threshold for Invalid Logon Attempts
    Published by
    Designer Media Ltd


    How to Set Account Lockout Threshold for Invalid Logon Attempts

       Information
    The account lockout threshold security setting determines the number of invalid or failed logon attempts with a incorrect user name and/or password that causes a user account to be locked out in Windows 7 and Windows 8. A locked out account cannot be used until it is reset by an administrator or until the account lockout duration for the account has expired or the administrator manually unlocks the locked out user account.

    The reset account lockout after security setting determines the number of minutes that must elapse after a invalid logon attempt before the invalid logon attempt counter is reset back to 0 invalid logon attempts.

    By default, the account lockout threshold security setting is set to 0 failed logon attempts so that users accounts will never be locked out. This will show you how to set the account lockout threshold for how many failed logon attempts that you want before the user account is locked out.
       Note
    Failed password attempts against workstations or member servers that have been locked using either CTRL+ALT+DELETE or password protected screen savers count as failed logon attempts.
       Warning
    You will only be able to do this while logged in as an administrator.

    EXAMPLE: Locked Out User Account
    NOTE: This is the locked out message a user will get if they reach the account lockout threshold number of invalid logon attempts.
    Account Lockout Threshold for Invalid Logon Attempts-logon_screen.jpg



    OPTION ONE

    Through Local Security Policy


    1. Open the Local Security Policy editor.

    2. In the left pane, expand Account Policies, and click on Acount Lockout Policy. (see screenshot below)
    Account Lockout Threshold for Invalid Logon Attempts-step1.jpg
    3. In the right pane, double click on Account lockout threshold. (see screenshot above)

    4. Type in a number between 0 and 999 for how many invalid logon attempts you want allowed before the user acount is locked out, then click on OK. (see screenshot below)
    NOTE: Typing in the number 0 will disable account lockout so that users accounts will never be locked out for invalid logon attempts.
    Account Lockout Threshold for Invalid Logon Attempts-step2.jpg
    5. Click on OK. (see screenshots below)
    NOTE: You will not see this window unless you are changing the number of invalid logon attempts from 0 or to 0 in step 4 above.
    Account Lockout Threshold for Invalid Logon Attempts-step3.jpg

    Account Lockout Threshold for Invalid Logon Attempts-step4.jpg
    6. When done, close the Local Security Policy editor. (see screenshot below)
    Account Lockout Threshold for Invalid Logon Attempts-step5.jpg



    OPTION TWO

    Through Elevated Command Prompt


    1. Open an elevated command prompt in Windows 7 or Windows 8.

    2. To See the Current "Account Lockout Threshold" Setting
    A) In the elevated command prompt, type net accounts and press enter. (see screenshots below)
    NOTE: If the account lockout threshold is set to 0 invaild logon attempts, it will show as Never here instead. Anything higher than 0 will show as that number.
    Account Lockout Threshold for Invalid Logon Attempts-cmd1b.jpg

    Account Lockout Threshold for Invalid Logon Attempts-cmd1.jpg
    3. In the command prompt, type the command below and press Enter.
    NOTE: Substitute (0-999) for a number between 0 and 999 invalid logon attempts you want allowed before the user acount is locked out. Typing in the number 0 will disable account lockout so that users accounts will never be locked out for invalid logon attempts.
    net accounts /lockoutthreshold:(0-999)

    For example, for 5 invalid logon attempts, I would type in this command below and press enter.

    net accounts /lockoutthreshold:5

    Account Lockout Threshold for Invalid Logon Attempts-cmd2.jpg
    4. Close the elevated command prompt.
    That's it,
    Shawn








  • Posts : 4,772
    Windows 7 Ultimate - 64-bit | Windows 8 Pro - 64-bit
       #1

    Great Tutorial ... !! Thank Shawn !!
      My Computer


  • Posts : 71,959
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #2

    You're most welcome Shyam. Thank you. :)
      My Computer


  • NoN
    Posts : 4,166
    Windows 7 Professional SP1 - x64 [Non-UEFI Boot]
       #3

    Hi Shawn, This is a nice security Tip! Guess someone crackin' up the password will be disappointed a little.

    It was a bit obscur to me first, a password at log on was needed for this Tip being effective. Thought first i could set and then go with my only user account to Automatically Log On to.


    There's also this Tip that can be added to Audit:

    Enabling Audit Policy For Account Lockout


    Start => Run secpol.msc (Group Policy Editor)
    1. Select Local Policies => Audit Policy.
    2. Double click on "accounts management", properties and check boxes: Success & Failure.
    Last edited by NoN; 10 Mar 2011 at 18:34.
      My Computer


  • Posts : 71,959
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #4

    Hello NoN,

    LOL, yeah it might foil their attempts a bit.

    That would be a good tutorial for you to write up if you would like to.
      My Computer


  • NoN
    Posts : 4,166
    Windows 7 Professional SP1 - x64 [Non-UEFI Boot]
       #5

    Brink said:
    Hello NoN,

    LOL, yeah it might foil their attempts a bit.

    That would be a good tutorial for you to write up if you would like to.
    Thanks Shawn,

    I'll try to organize a new tutorial thread for that one Audit, i need one or two more infos for this to be concretized.:)
      My Computer


  • Posts : 71,959
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #6

    Okey doke. :)
      My Computer


  • NoN
    Posts : 4,166
    Windows 7 Professional SP1 - x64 [Non-UEFI Boot]
       #7

    Brink said:
    Okey doke. :)


    If you have a problem
    And you need a helping hand
    Cross the dell
    And ring the bell
    He'll understand

    Don't worry cause
    Here comes Oakie Doke
    The friendliest of folk
    Is Mister Oakie Doke

    Oakie Doke
    Oakie Doke
    The helpful handy man
    Get ready for good
    Old mister Oakie Doke !

    Got to dig for some english language screenshots...i'm on non-english system!!
    Attached Thumbnails Attached Thumbnails Account Lockout Threshold for Invalid Logon Attempts-oakiedoke.jpg  
      My Computer


  • Posts : 71,959
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #8

      My Computer


  • Posts : 56
    Windows 7 Ultimate
       #9

    Great tutorial mate, I was looking for solution of this problem since very long. Here you come again to rescue me. Thanks brother.
      My Computer


  •  
    Page 1 of 2 12 LastLast

      Related Discussions
    Our Sites
    Site Links
    About Us
    Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

    © Designer Media Ltd
    All times are GMT -5. The time now is 06:57.
    Find Us