Lockout Duration was not set

Question

If the lockout threshold=5 invalid logon attempts
reset lockout counter = 1440 minutes
Lockout duration = -1 (not set)

If the lockout duration was not set, what will happen or impact to the Lockout threshold and reset lockout counter?

Answer 1

Hi @PPan

Have a look at this post which explains how the three option interact to control the lockout behavior

https://specopssoft.com/blog/active-directory-account-lockout-policy/

Gary.

Answer 2

Hi PPan-9056,

Please refer to the following link for information about lockout policies within Group Policy:

https://learn.microsoft.com//windows/security/threat-protection/security-policy-settings/account-lockout-policy

I hope this answers your question.

-------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--