Account Lockout - Reset Invalid Logon Counter

    Account Lockout - Reset Invalid Logon Counter

    Account Lockout - Reset Invalid Logon Counter

    How to Set the Reset Account Lockout Counter After Setting
    Published by
    Designer Media Ltd


    How to Set the Reset Account Lockout Counter After Setting

       Information
    The reset account lockout after security setting determines the number of minutes that must elapse after a invalid logon attempt before the invalid logon attempt counter is reset back to 0 invalid logon attempts. If the account lockout threshold of invalid logon attempts is reached before the counter resets, then the user account will be locked out until either the account lockout duration has expired or the administrator manually unlocks the locked out user account.

    When you first setup an account lockout threshold, the default reset account lockout after setting is set to 30 minutes. This will show you how to set how many minutes you want this instead in Windows 7 and Windows 8.

       Warning
    You will only be able to do this while logged in as an administrator.

    EXAMPLE: Locked Out User Account
    NOTE: This is the locked out message a user will get if they reach the account lockout threshold number of invalid logon attempts.
    Account Lockout - Reset Invalid Logon Counter-logon_screen.jpg




    OPTION ONE

    Through Local Security Policy


    1. If you have not already, you will need to set a account lockout threshold first for the number of invalid or failed logon attempts that causes a user account to be locked out.

    2. Open the Local Security Policy editor.

    3. In the left pane, expand Account Policies, and click on Acount Lockout Policy. (see screenshot below)
    Account Lockout - Reset Invalid Logon Counter-reset1.jpg
    4. In the right pane, double click on Account lockout duration. (see screenshot above)

    5. Type in a number between 0 and 99999 for how many minutes you want after a invalid logon attempt before the invalid logon attempt counter is reset back to 0 invalid logon attempts, then click on OK. (see screenshot below)
    NOTE: The reset account lockout counter after time must be less than or equal to the account lockout duration time.
    Account Lockout - Reset Invalid Logon Counter-reset2.jpg
    6. Click on OK. (see screenshot below)
    NOTE: You will not see this unless the reset account lockout counter after time is not less than or equal to the account lockout duration time..
    Account Lockout - Reset Invalid Logon Counter-reset2b.jpg
    7. When done, close the Local Security Policy editor. (see screenshot below)
    Account Lockout - Reset Invalid Logon Counter-reset3.jpg



    OPTION TWO

    Through Elevated Command Prompt


    1. If you have not already, you will need to set a account lockout threshold first for the number of invalid or failed logon attempts that causes a user account to be locked out.

    2. Open an elevated command prompt in Windows 7 or Windows 8.

    3. To See the Current Reset Account "Lockout observation window" Setting
    A) In the elevated command prompt, type net accounts and press enter. (see screenshot below)
    NOTE: The reset account lockout counter after time must be less than or equal to the account lockout duration time.
    Account Lockout - Reset Invalid Logon Counter-cmd_reset1.jpg
    4. In the command prompt, type the command below and press Enter.
    NOTE: Substitute (0-99999) for a number between 0 and 99999 for how many minutes you want after a invalid logon attempt before the invalid logon attempt counter is reset back to 0 invalid logon attempts.
    Code:
    net accounts /lockoutwindow:(0-99999)
    For example, for 15 minutes until the invalid logon counter resets for a user account, I would type in this command below and press enter.

    Code:
    net accounts /lockoutwindow:15
    Account Lockout - Reset Invalid Logon Counter-cmd_reset2.jpg
    5. Close the elevated command prompt.
    That's it,
    Shawn









  1. Posts : 2
    Windows 7 Professional 64bit Service Pack 1
       #1

    Hello,

    I completed all tasks above successfully using the Elevated Command Prompt. However, when I restart the computer, all commands default back to what they were before I made the changes. I am on a Domain network. Can these settings be changed permanently even though I'm on a Domain network? If so, how?
      My Computer


  2. Posts : 71,959
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #2

    Hello helpwithwindows, and welcome to Seven Forums. :)

    While joined to a domain, the domain will override your settings. You'll need to have the domain administrator set it for the domain policy instead.
      My Computer


  3. Posts : 2
    Windows 7 Professional 64bit Service Pack 1
       #3

    I see Brink and Thank you. The domain admin will not set it for the domain policy because they say it's a security risk... so I am out of luck. Thanks again for your reply. :)
      My Computer


  4. Posts : 71,959
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #4

    You're most welcome.

    Yeah, you're out of luck then.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 22:33.
Find Us