Want to set password lockout policy as only admin can unlock the domain account once its get locked after 3 attempts.

Question

My organization required below settings in domain account lockout policy.

1) Account should get lockout after 3 attempts
2) Domain account should unlocked by Administrator only.

Aniket T

Answer 1

Hi there,

You must have Administrators rights on the local device, or you must have the appropriate permissions to update a Group Policy Object (GPO) on the domain controller to perform these procedures. You can follow the steps in the link to Configure security policy settings

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/how-to-configure-security-policy-settings

Hope this answers all your queries, if not please do repost back.
If an Answer is helpful, please click "Accept Answer" and upvote it : )

Answer 2

Dear,

That's all i configured earlier. Required direct inputs for below points.
We cannot define below settings as administrator unlock locked account only.