It's advisable to set Account lockout duration to approximately 15 minutes. If the Account lockout duration is set to 0, the account will remain locked until an administrator unlocks it manually. If Account lockout threshold is configured, after the specified number of failed attempts, the account will be locked out. A user-defined number of minutes from 0 through 99,999.This policy setting is dependent on the Account lockout threshold policy setting that is defined, and it must be greater than or equal to the value specified for the Reset account lockout counter after policy setting. If Account lockout threshold is set to a number greater than zero, Account lockout duration must be greater than or equal to the value of Reset account lockout counter after. A value of 0 specifies that the account will be locked out until an administrator explicitly unlocks it. The available range is from 1 through 99,999 minutes. The Account lockout duration policy setting determines the number of minutes that a locked-out account remains locked out before automatically becoming unlocked.
Describes the best practices, location, values, and security considerations for the Account lockout duration security policy setting.
0 kommentar(er)
