How to change the account lockout threshold

The procedure for changing the account lockout threshold is as follows:
1. Log in to the AD server.
2. Choose Start > Administrative Tools > Group Policy Management.
3. In the navigation tree of the Group Policy Management window, choose Group Policy Management > Forest: Domain name > Domains > Infrastructure domain name > Group Policy Objects.
4. Right-click Default Domain Policy and choose Edit.
5. In the navigation tree of the Group Policy Management Editor window, choose Computer Configuration > Policies > Windows Settings > Security Settings > Account Policies > Account Lockout Policy.
6. In the policy list displayed in the right pane, right-click Account lockout threshold and choose Properties.
7. In the Account lockout threshold Properties window, set a value for invalid login attempts. The recommended value is 5.
8. Click OK.
9. Click OK in the dialog box.
----End

Scroll to top