Request for Guidance on Laptop Lockout Configuration and Email Notifications

Question

I am currently working as an IT Executive at a private company, and I am looking to implement a security measure across all office laptops. Specifically, I would like to configure the systems to automatically lock after more than three incorrect password attempts. Furthermore, I would like to receive an email notification whenever a device is locked due to these failed login attempts.

Could you please let me know if it is possible to achieve this without the use of a server? If so, I would be grateful if you could share the step-by-step process to set this up.

Thank you for your support, and I look forward to your guidance.

Answer 1

Hi

I guess it is the local user account you want to lock and not the computer account. Right? Depending on how many users/computers we are talking about, I would prefer to have a central place to store and apply these settings. It could be Active Directory or maybe Microsoft Intune.

However, it is possible to create local password policy on each Windows computes as well:

1. Sign in with an administrator account.
2. Press Win + R, type secpol.msc, press Enter.
3. Expand Computer Configuration → Windows Settings → Security Settings → Account Policies → Account Lockout Policy.
4. Double‑click Account lockout threshold, set it to 3 attempts, and click OK. Windows prompts for the other two settings; common values are:
   • Account lockout duration: 30 minutes
   • Reset account lockout counter after: 30 minutes
5. Click Apply. The change is immediate; no reboot needed.

Make sure your administrator account is not being locked out or set a lockoutduration time, where the lock will automatically be removed again.

Best Regards

Thomas

[Mod Removed - Link]