+ Reply to Thread
Results 1 to 7 of 7
  1. Senior Member
    Join Date
    Jan 2007
    Posts
    210

    Certifications
    MCP, MCSA, [70-290] [70-270] [70-291], A+, Network+
    #1

    Default Account Lockout is not working

    I have setup a GPO with an account lockout of 1.

    Applied the GPO to the OU with one workstation.

    Yet the computer is not locking out after one attempts.

    What am I doing wrong?
    Reply With Quote Quote  

  2. SS -->
  3. Senior Member mwgood's Avatar
    Join Date
    Feb 2004
    Location
    New Mexico
    Posts
    298

    Certifications
    MCSE, CCNP
    #2
    Try running rsop.msc on the workstation to see if your GPO was actually applied.
    Reply With Quote Quote  

  4. Senior Member
    Join Date
    Mar 2007
    Posts
    12,308
    #3
    Password policies have to be configured at the domain level. If you configure them at the OU, they only apply to local accounts.
    Reply With Quote Quote  

  5. mikej412's caddy sprkymrk's Avatar
    Join Date
    Feb 2006
    Location
    Charleston, SC
    Posts
    4,976

    Certifications
    MCP (NT4 Server), MCSA 2000, MCSA 2003, CCNA, Security+, Network+
    #4
    If you apply Account Lockout at a level other than the domain level, it only applies to local accounts, not domain accounts.

    Create a local user on that computer and try it with his account, it should work.


    Dynamic did you edit your reply while I was replying? Didn't see a mention of local accounts on your at first.
    Reply With Quote Quote  

  6. Senior Member
    Join Date
    Jan 2007
    Posts
    210

    Certifications
    MCP, MCSA, [70-290] [70-270] [70-291], A+, Network+
    #5
    Then I should be editing the Domain Default Policy in Group Policy Management?
    Reply With Quote Quote  

  7. Senior Member gojericho0's Avatar
    Join Date
    May 2004
    Posts
    1,061

    Certifications
    A+, Security+ Network+, MCSA:S 2003, CCNA
    #6
    Quote Originally Posted by Gundamtdk
    Then I should be editing the Domain Default Policy in Group Policy Management?
    Yup and make sure you are not blocking inheritance on your Domain Controllers OU. I had this problem in production trying to apply this at the OU level, and it took me about a week to figure out why it wasn't working
    Reply With Quote Quote  

  8. Junior Member Registered Member
    Join Date
    Nov 2013
    Posts
    1
    #7
    I know this thread is kind of old however I have run into this issue with another admin setting up the policy incorrectly and I have made the changes to reflect the policy in the default domain policy. The issue is I am still only seeing this affect local accounts. Any help would be appreciated.

    Thanks,
    Reply With Quote Quote  

+ Reply to Thread

Social Networking & Bookmarks