Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Account Lockout Threshold for Invalid Logon Attempts



Account Lockout Threshold for Invalid Logon Attempts

How to Set Account Lockout Threshold for Invalid Logon Attempts
Published by Brink
19 Mar 2010
Default Account Lockout Threshold for Invalid Logon Attempts

How to Set Account Lockout Threshold for Invalid Logon Attempts

information   Information
The account lockout threshold security setting determines the number of invalid or failed logon attempts with a incorrect user name and/or password that causes a user account to be locked out in Windows 7 and Windows 8. A locked out account cannot be used until it is reset by an administrator or until the account lockout duration for the account has expired or the administrator manually unlocks the locked out user account.

The reset account lockout after security setting determines the number of minutes that must elapse after a invalid logon attempt before the invalid logon attempt counter is reset back to 0 invalid logon attempts.

By default, the account lockout threshold security setting is set to 0 failed logon attempts so that users accounts will never be locked out. This will show you how to set the account lockout threshold for how many failed logon attempts that you want before the user account is locked out.
Note   Note
Failed password attempts against workstations or member servers that have been locked using either CTRL+ALT+DELETE or password protected screen savers count as failed logon attempts.
warning   Warning
You will only be able to do this while logged in as an administrator.

EXAMPLE: Locked Out User Account
NOTE: This is the locked out message a user will get if they reach the account lockout threshold number of invalid logon attempts.
Account Lockout Threshold for Invalid Logon Attempts-logon_screen.jpg



OPTION ONE
Through Local Security Policy
1. Open the Local Security Policy editor.

2. In the left pane, expand Account Policies, and click on Acount Lockout Policy. (see screenshot below)
Account Lockout Threshold for Invalid Logon Attempts-step1.jpg
3. In the right pane, double click on Account lockout threshold. (see screenshot above)

4. Type in a number between 0 and 999 for how many invalid logon attempts you want allowed before the user acount is locked out, then click on OK. (see screenshot below)
NOTE: Typing in the number 0 will disable account lockout so that users accounts will never be locked out for invalid logon attempts.
Name:  Step2.jpg
Views: 16183
Size:  61.4 KB
5. Click on OK. (see screenshots below)
NOTE: You will not see this window unless you are changing the number of invalid logon attempts from 0 or to 0 in step 4 above. If you have the account lockout threshold (step 4) set to a
Name:  Step3.jpg
Views: 16100
Size:  77.6 KB

Name:  Step4.jpg
Views: 16070
Size:  83.3 KB

6. When done, close the Local Security Policy editor. (see screenshot below)
Account Lockout Threshold for Invalid Logon Attempts-step5.jpg



OPTION TWO
Through Elevated Command Prompt
1. Open an elevated command prompt in Windows 7 or Windows 8.

2. To See the Current "Account Lockout Threshold" Setting
A) In the elevated command prompt, type net accounts and press enter. (see screenshots below)
NOTE: If the account lockout threshold is set to 0 invaild logon attempts, it will show as Never here instead. Anything higher than 0 will show as that number.
Name:  CMD1B.jpg
Views: 16463
Size:  103.7 KB

Name:  CMD1.jpg
Views: 16186
Size:  101.4 KB

3. In the command prompt, type the command below and press Enter.
NOTE: Substitute (0-999) for a number between 0 and 999 invalid logon attempts you want allowed before the user acount is locked out. Typing in the number 0 will disable account lockout so that users accounts will never be locked out for invalid logon attempts.
net accounts /lockoutthreshold:(0-999)

For example, for 5 invalid logon attempts, I would type in this command below and press enter.

net accounts /lockoutthreshold:5

Name:  CMD2.jpg
Views: 16288
Size:  68.7 KB
4. Close the elevated command prompt.
That's it,
Shawn





Related Tutorials

Published by
19 Mar 2010   #1
Capt.Jack Sparrow

Windows 7 Ultimate - 64-bit | Windows 8 Pro - 64-bit
 
 

Great Tutorial ... !! Thank Shawn !!


My System SpecsSystem Spec
19 Mar 2010   #2
Brink
Microsoft MVP

64-bit Windows 8.1 Enterprise
 
 

You're most welcome Shyam. Thank you.
My System SpecsSystem Spec
10 Mar 2011   #3
NoN

Windows 7 Professional SP1 - x64 [Non-UEFI Boot]
 
 

Hi Shawn, This is a nice security Tip! Guess someone crackin' up the password will be disappointed a little.

It was a bit obscur to me first, a password at log on was needed for this Tip being effective. Thought first i could set and then go with my only user account to Automatically Log On to.


There's also this Tip that can be added to Audit:

Enabling Audit Policy For Account Lockout


Start => Run secpol.msc (Group Policy Editor)
  1. Select Local Policies => Audit Policy.
  2. Double click on "accounts management", properties and check boxes: Success & Failure.
My System SpecsSystem Spec
.


10 Mar 2011   #4
Brink
Microsoft MVP

64-bit Windows 8.1 Enterprise
 
 

Hello NoN,

LOL, yeah it might foil their attempts a bit.

That would be a good tutorial for you to write up if you would like to.
My System SpecsSystem Spec
10 Mar 2011   #5
NoN

Windows 7 Professional SP1 - x64 [Non-UEFI Boot]
 
 

Quote   Quote: Originally Posted by Brink View Post
Hello NoN,

LOL, yeah it might foil their attempts a bit.

That would be a good tutorial for you to write up if you would like to.
Thanks Shawn,

I'll try to organize a new tutorial thread for that one Audit, i need one or two more infos for this to be concretized.
My System SpecsSystem Spec
10 Mar 2011   #6
Brink
Microsoft MVP

64-bit Windows 8.1 Enterprise
 
 

Okey doke.
My System SpecsSystem Spec
10 Mar 2011   #7
NoN

Windows 7 Professional SP1 - x64 [Non-UEFI Boot]
 
 

Quote   Quote: Originally Posted by Brink View Post
Okey doke.


If you have a problem
And you need a helping hand
Cross the dell
And ring the bell
He'll understand

Don't worry cause
Here comes Oakie Doke
The friendliest of folk
Is Mister Oakie Doke

Oakie Doke
Oakie Doke
The helpful handy man
Get ready for good
Old mister Oakie Doke !

Got to dig for some english language screenshots...i'm on non-english system!!


Attached Images
 
My System SpecsSystem Spec
10 Mar 2011   #8
Brink
Microsoft MVP

64-bit Windows 8.1 Enterprise
 
 

My System SpecsSystem Spec
28 Apr 2011   #9
niceguy75

Windows 7 Ultimate
 
 

Great tutorial mate, I was looking for solution of this problem since very long. Here you come again to rescue me. Thanks brother.
My System SpecsSystem Spec
Comment

 Account Lockout Threshold for Invalid Logon Attempts




Tutorial Tools



Similar help and support threads for2: Account Lockout Threshold for Invalid Logon Attempts
Windows 7 Tutorial Category
Account Lockout - Unlock a Locked Out User Account Tutorials
Account Lockout: Defining an Audit Policy Tutorials
account lockout policy General Discussion
Account Lockout - Reset Invalid Logon Counter Tutorials
Account Lockout Duration for Locked Out User Accounts Tutorials
Account lockout problem System Security
Account Lockout (sort of) in Win 7 General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 10:45 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33