Allow Administrator account lockout Missing from GPMC

Andrew Haverland 1 Reputation point
2023-02-08T16:21:17.0666667+00:00

KB5020282 makes a new Account Lockout Policy setting available, "Allow Administrator account lockout". Even though this new setting is visible through the group policy editor, it does not show up when viewing the policy settings from GPMC. In addition, the setting is missing from group policy results view. Is there anyone that is able to see that "Allow Administrator account lockout" is set on a policy in GPMC? Hopefully the image better explains what we are seeing. We have server 2019 DCs and GPMC is not displaying "Allow Administrator account lockout" (not visible from Windows 10 22H2 remote tools either). Is it visible on a newer server OS? We have the latest admx files loaded.Capture

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
5,277 questions
Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,884 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,806 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Konstantinos Passadis 18,991 Reputation points MVP
    2023-02-08T16:30:03.23+00:00

    Hello @Andrew Haverland !

    As we read 'For new computers on Windows 11, version 22H2, or any new computers that include the October 11, 2022, Windows cumulative updates before the initial setup, these settings will be set by default at system setup. '

    This is from the URL https://support.microsoft.com/en-us/topic/kb5020282-account-lockout-available-for-built-in-local-administrators-bce45c4d-f28d-43ad-b6fe-70156cb2dc00

    So this setting is already set up for new Windows 11 and October Updated / Patvhed PC

    If you found this answer helpful please mark it as Accepted !

    Best regards


  2. Thameur-BOURBITA 32,831 Reputation points
    2023-02-08T16:33:20.4733333+00:00

    Hi @Andrew Haverland

    It's normal behavior, because this setting is available only in local GPO:

    Allow administrator account lockout

    For more details please read the following KB : KB5020282—Account lockout available for built-in local administrators

    Please don't forget to mark helpful answer as accepted


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.