Overview#MsDS-LockoutDuration is a Microsoft Active Directory Password Policy AttributeType that is used for Intruder Detection that how long an account is locked after too many invalid login attempts is reached.
Format d:hh:mm:ss. For example, to specify 30 minutes, enter 0:00:30:00.AttributeTypes is defined as:
- OID of 1.2.840.113518.104.22.1688
- NAME: MsDS-LockoutDuration
- SYNTAX: 1.2.840.113522.214.171.1246 (LargeInteger)
- USAGE: UserApplications
- Used as MUST in:
- Used MAY in: