How do I change the account lockout settings for Azure GovCloud accounts?

Question

All of the documentation (and even discussions I've found online) tell me how to change the account lockout settings for the Azure Public cloud. But I can't find anywhere that I can adjust the setting for Azure GovCloud (or even see what they are set to). I have a user who was trying to login to his account, and hit the limit and got locked out. (It wasn't his fault, we have been migrating from a local Domain Controller for Active Directory to Azure Active Directory (AAD) - and it somehow dorked up his account today.)

I'd really like to just reset his account so it isn't locked out anymore - but it appears I can't do that either. And because our GovCloud AD is linked to our company AAD (now) he can't use Self-Service Password Reset (SSPR) from GovCloud. (We already reset his password from our AAD setup.)

Answer 1

Hi @Robin Wilson
I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others (Opens in new window or tab)", I'll repost your solution in case you'd like to "Accept (Opens in new window or tab)" the answer.

Issue:

All of the documentation (and even discussions I've found online) tell me how to change the account lockout settings for the Azure Public cloud. But I can't find anywhere that I can adjust the setting for Azure GovCloud (or even see what they are set to). I have a user who was trying to login to his account and hit the limit and got locked out. (It wasn't his fault we have been migrating from a local Domain Controller for Active Directory to Azure Active Directory (AAD) - and it somehow dorked up his account today.) I'd really like to just reset his account so it isn't locked out anymore - but it appears I can't do that either. And because our GovCloud AD is linked to our company AAD (now) he can't use Self-Service Password Reset (SSPR) from GovCloud. (We already reset his password from our AAD setup.)

Solution:

The issue is resolved by disconnected the Azure GovCloud Entra ID your local AD Domain Controller and that allowed you to reset passwords/accounts to get them logging in again.

If you have any other questions or are still running into more issues, please let me know.
Thank you again for your time and patience throughout this issue.

Thanks,
Akhilesh.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

This problem has essentially been resolved. We disconnected the Azure GovCloud Entra ID from our local AD Domain Controller and that allowed us to reset passwords/accounts to get them logging in again.