Setting account lockout on local computer, but doesnt work

Hi

I've encountered a problem. I set the accout lockout after failed attempts to three but it seems to lock out after two failed attempts. Anyone know the reason for this? I tried changing the value to four but it still after that locked out after two.

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

spudnik

is it part of a domain?
where are you setting this?

qsub

It's in workgroup setting.
Doing it through local computer policy setting.

hanakuin

You should still be able to run gpresult at a command prompt to see if your local policy setting is actually being applied.

spudnik

are you using the local security policy or gpedit.msc?

qsub

spudnik wrote:

are you using the local security policy or gpedit.msc?

Well, I used the mmc, then added local security policy snap in. Does it matter?

Ricka182

It shouldn't matter which method you use....did you refresh the machine policy?

qsub

Ricka182 wrote:

It shouldn't matter which method you use....did you refresh the machine policy?

ughh, is there a command to do that?

I know in server2k3, there is.... not too sure about winxp

Ricka182

Yup...

spudnik

from cmd prompt run

gpupdate /force

qsub

gpupdate didn't work.

We updated to SP2, it somewhat worked.

At three times, it locks out.

BUT

Pretend we fail the first two times, then the third time when I enter in the ACTUAL password, it locks out. Tried it multiple times, so It's not a mistype in the password (which is 123456)

crabeater

Sounds like it should all work - what are your lockout duration & reset times?

jescab

do a gpresult from a command line to double check your policies and make sure you are not stepping on yourself.