Account Lockout - Reset Invalid Logon Counter

How to Set the Reset Account Lockout Counter After Setting

   Information
The reset account lockout after security setting determines the number of minutes that must elapse after a invalid logon attempt before the invalid logon attempt counter is reset back to 0 invalid logon attempts. If the account lockout threshold of invalid logon attempts is reached before the counter resets, then the user account will be locked out until either the account lockout duration has expired or the administrator manually unlocks the locked out user account.

When you first setup an account lockout threshold, the default reset account lockout after setting is set to 30 minutes. This will show you how to set how many minutes you want this instead in Windows 7 and Windows 8.

   Warning
You will only be able to do this while logged in as an administrator.

EXAMPLE: Locked Out User Account
NOTE: This is the locked out message a user will get if they reach the account lockout threshold number of invalid logon attempts.
Logon_Screen.jpg




OPTION ONE

Through Local Security Policy


1. If you have not already, you will need to set a account lockout threshold first for the number of invalid or failed logon attempts that causes a user account to be locked out.

2. Open the Local Security Policy editor.

3. In the left pane, expand Account Policies, and click on Acount Lockout Policy. (see screenshot below)
Reset1.jpg
4. In the right pane, double click on Account lockout duration. (see screenshot above)

5. Type in a number between 0 and 99999 for how many minutes you want after a invalid logon attempt before the invalid logon attempt counter is reset back to 0 invalid logon attempts, then click on OK. (see screenshot below)
NOTE: The reset account lockout counter after time must be less than or equal to the account lockout duration time.
Reset2.jpg
6. Click on OK. (see screenshot below)
NOTE: You will not see this unless the reset account lockout counter after time is not less than or equal to the account lockout duration time..
Reset2B.jpg
7. When done, close the Local Security Policy editor. (see screenshot below)
Reset3.jpg



OPTION TWO

Through Elevated Command Prompt


1. If you have not already, you will need to set a account lockout threshold first for the number of invalid or failed logon attempts that causes a user account to be locked out.

2. Open an elevated command prompt in Windows 7 or Windows 8.

3. To See the Current Reset Account "Lockout observation window" Setting
A) In the elevated command prompt, type net accounts and press enter. (see screenshot below)
NOTE: The reset account lockout counter after time must be less than or equal to the account lockout duration time.
CMD_Reset1.jpg
4. In the command prompt, type the command below and press Enter.
NOTE: Substitute (0-99999) for a number between 0 and 99999 for how many minutes you want after a invalid logon attempt before the invalid logon attempt counter is reset back to 0 invalid logon attempts.
Code:
net accounts /lockoutwindow:[B][COLOR=#ff0000](0-99999)[/COLOR][/B]
For example, for 15 minutes until the invalid logon counter resets for a user account, I would type in this command below and press enter.

Code:
net accounts /lockoutwindow:15
CMD_Reset2.jpg
5. Close the elevated command prompt.
That's it,
Shawn






 
Last edited:
Hello,

I completed all tasks above successfully using the Elevated Command Prompt. However, when I restart the computer, all commands default back to what they were before I made the changes. I am on a Domain network. Can these settings be changed permanently even though I'm on a Domain network? If so, how?
 

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
HP ProDesk
OS
Windows 7 Professional 64bit Service Pack 1
CPU
Intel i5 4690 @ 3.5GHz
Motherboard
AMD
Memory
4.00 GB
Graphics Card(s)
HD Graphics 4600
Hard Drives
SCSI
Antivirus
Trend Micro Office Scan
Browser
IE Chrome FireFox Opera
Hello helpwithwindows, and welcome to Seven Forums. :)

While joined to a domain, the domain will override your settings. You'll need to have the domain administrator set it for the domain policy instead.
 

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
Self built custom
OS
64-bit Windows 11 Pro for Workstations
CPU
Intel i7-8700K OC'd to 5 GHz
Motherboard
ASUS ROG Maximus XI Formula Z390
Memory
64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz
Graphics Card(s)
ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
Sound Card
Integrated
Monitor(s) Displays
2 x Samsung Odyssey G7 27"
Screen Resolution
2560x1440
Hard Drives
1TB Samsung 990 PRO M.2,
4TB Samsung 990 PRO PRO M.2,
TerraMaster F8 SSD Plus NAS
PSU
Seasonic Prime Titanium 850W
Case
Thermaltake Core P3
Cooling
Corsair Hydro H115i
Keyboard
Logitech wireless K800
Mouse
Logitech MX Master 4
Internet Speed
2 Gb/s Download and 100 Mb/s Upload
Antivirus
Malwarebyte Anti-Malware Premium
Browser
Google Chrome
Other Info
Logitech Z625 speaker system,
Logitech BRIO 4K Pro webcam,
HP Color LaserJet Pro MFP M477fdn,
APC SMART-UPS RT 1000 XL - SURT1000XLI,
Galaxy S23 Plus phone
I see Brink and Thank you. The domain admin will not set it for the domain policy because they say it's a security risk... so I am out of luck. Thanks again for your reply. :)
 

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
HP ProDesk
OS
Windows 7 Professional 64bit Service Pack 1
CPU
Intel i5 4690 @ 3.5GHz
Motherboard
AMD
Memory
4.00 GB
Graphics Card(s)
HD Graphics 4600
Hard Drives
SCSI
Antivirus
Trend Micro Office Scan
Browser
IE Chrome FireFox Opera
You're most welcome.

Yeah, you're out of luck then. :(
 

My Computer

Computer type
PC/Desktop
Computer Manufacturer/Model Number
Self built custom
OS
64-bit Windows 11 Pro for Workstations
CPU
Intel i7-8700K OC'd to 5 GHz
Motherboard
ASUS ROG Maximus XI Formula Z390
Memory
64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz
Graphics Card(s)
ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
Sound Card
Integrated
Monitor(s) Displays
2 x Samsung Odyssey G7 27"
Screen Resolution
2560x1440
Hard Drives
1TB Samsung 990 PRO M.2,
4TB Samsung 990 PRO PRO M.2,
TerraMaster F8 SSD Plus NAS
PSU
Seasonic Prime Titanium 850W
Case
Thermaltake Core P3
Cooling
Corsair Hydro H115i
Keyboard
Logitech wireless K800
Mouse
Logitech MX Master 4
Internet Speed
2 Gb/s Download and 100 Mb/s Upload
Antivirus
Malwarebyte Anti-Malware Premium
Browser
Google Chrome
Other Info
Logitech Z625 speaker system,
Logitech BRIO 4K Pro webcam,
HP Color LaserJet Pro MFP M477fdn,
APC SMART-UPS RT 1000 XL - SURT1000XLI,
Galaxy S23 Plus phone
Back
Top