Overview#

MsDS-LockoutObservationWindow is a Microsoft Active Directory Password Policy AttributeType that is used for Intruder Detection that determines how long after an invalid login attempt that system invalid login attempts are tracked.

This value is reset when the user logs in successfully. Format is d:hh:mm:ss. For example, to specify 5 minutes, enter 0:00:05:00.

LDAP Attribute Definition#

The MsDS-LockoutObservationWindow AttributeTypes is defined as:

• OID of 1.2.840.113556.1.4.2017
• NAME: MsDS-LockoutObservationWindow
• DESC:
• EQUALITY:
• ORDERING:
• SYNTAX: 1.2.840.113556.1.4.906 (LargeInteger)
• SINGLE-VALUE
• USAGE: UserApplications
• Used as MUST in:
  • MsDS-PasswordSettings
• Used MAY in:

More Information#

There might be more information for this subject on one of the following:

• 1.2.840.113556.1.4.2017
• Active Directory Account Lockout
• MsDS-PasswordSettings