How to Do Account Lockout Policy on Server

Introduction

In this article, I’m going to show you how to do an account lockout policy on server 2019 in the proper method and easiest way.

An account lockout policy is a security policy that disables a user account after a specified number of incorrect password attempts within a specified period. This prevents users from logging into the network for a set amount of time, even if they enter the correct password.

Account lockout policies are important for security because they can prevent malicious users and hackers from accessing accounts and computer systems.

Account lockout policy settings can be configured in the Group Policy Management Console.

Benefits of account lockout

  • Limiting the number of tries
  • Recording each failed domain login attempt
  • Disabling accounts if an incorrect password is entered repeatedly within a specific period
  • Enabling admins to lock an account until they unlock it

Step 1. On your server dashboard click on “tools” after clicking “group policy management”.

Server Manager Dashboard

Step 2. Right-click on “default domain policy” then click “edit”.

Default domain policy

Step 3. Enlarge “Computer policy”, “Windows settings”, “Security settings”, and “Account policy” then double click on “Account lockout policy” Now you can see the options.

Group policy management editor

Step 4. Here you can customize your account lockout policy now I’m going to set the “Account lockout threshold” double-click on it.

Account

Step 5. Customize your lockout policy and “apply” after “ok”.

Policy setting

Step 6. On your CMD update your policy using the “gpupdate /force” comment.

CMD

Conclusion

In this article, we all clearly understand how to do an account lockout policy on server 2019 in the proper method and easiest way. If there is clarification regarding this topic, feel free to contact me.


Similar Articles