!!!Reset account lockout counter after Computer Configuration\Windows Settings\Security Settings\Account Policies\Account Lockout Policy Description The msDS-LockoutObservationWindow attribute value determines the number of minutes that must elapse after a failed logon attempt before the bad logon attempt counter is reset to 0 bad logons. The range is 1 to 99999 minutes. By default, this policy is not defined, since it only has meaning when an Account lockout threshold is specified. If an [Account lockout threshold|lockout-Threshold] is defined, then this reset time must be less than or equal to the [Account lockout duration|lockout-Duration]. ![Active Directory Account Lockout] Describes details on [Active Directory Account Lockout]. !! More Information There might be more information for this subject on one of the following: [{ReferringPagesPlugin before='*' after='\n' }]