Overview#

MsDS-LockoutDuration is a Microsoft Active Directory Password Policy AttributeType that is used for Intruder Detection that how long an account is locked after too many invalid login attempts is reached.

Format d:hh:mm:ss. For example, to specify 30 minutes, enter 0:00:30:00.

LDAP Attribute Definition#

The MsDS-LockoutDuration AttributeTypes is defined as:

• OID of 1.2.840.113556.1.4.2018
• NAME: MsDS-LockoutDuration
• DESC:
• EQUALITY:
• ORDERING:
• SYNTAX: 1.2.840.113556.1.4.906 (LargeInteger)
• SINGLE-VALUE
• USAGE: UserApplications
• Used as MUST in:
  • MsDS-PasswordSettings
• Used MAY in:

More Information#

There might be more information for this subject on one of the following:

• 1.2.840.113556.1.4.2018
• Active Directory Account Lockout
• MsDS-PasswordSettings