Reset account lockout counter after

Reset account lockout counter after#

Computer Configuration\Windows Settings\Security Settings\Account Policies\Account Lockout Policy Description

The msDS-LockoutObservationWindow attribute value determines the number of minutes that must elapse after a failed logon attempt before the bad logon attempt counter is reset to 0 bad logons. The range is 1 to 99999 minutes.

By default, this policy is not defined, since it only has meaning when an Account lockout threshold is specified.

If an Account lockout threshold is defined, then this reset time must be less than or equal to the Account lockout duration.

Active Directory Account Lockout#

Describes details on Active Directory Account Lockout.

More Information#

There might be more information for this subject on one of the following: