disable account on invalid login

[Guest David]

I have a windows 2003 server sp1 being used as a domain controller.

 

Under the Default DC Security Settings/Account Policies/Account lockout policy

 

I have 'account lockout threshold' set to 3 invalid login attempts

and 'account lockout duration' is 30 min.

 

Yet when there are 3 invalid attemtps the account is not disabled.

 

Is there another setting somewhere that need attenion for the account

to be disabled on invalid login attemps.

 

thanks,

David

[Guest Phil Wilson]

The DC is available right? It's not using cached credentials is it?

Phil Wilson

 

"David" <David@discussions.microsoft.com> wrote in message

news:3CC8D11B-E63E-42C2-BC21-0C83149FD148@microsoft.com...<span style="color:blue">

>I have a windows 2003 server sp1 being used as a domain controller.

>

> Under the Default DC Security Settings/Account Policies/Account lockout

> policy

>

> I have 'account lockout threshold' set to 3 invalid login attempts

> and 'account lockout duration' is 30 min.

>

> Yet when there are 3 invalid attemtps the account is not disabled.

>

> Is there another setting somewhere that need attenion for the account

> to be disabled on invalid login attemps.

>

> thanks,

> David

> </span>

[Guest Mads Petersen]

"David" <David@discussions.microsoft.com> skrev i meddelelsen

news:3CC8D11B-E63E-42C2-BC21-0C83149FD148@microsoft.com...<span style="color:blue">

> I have a windows 2003 server sp1 being used as a domain controller.

>

> Under the Default DC Security Settings/Account Policies/Account lockout

> policy

>

> I have 'account lockout threshold' set to 3 invalid login attempts

> and 'account lockout duration' is 30 min.

>

> Yet when there are 3 invalid attemtps the account is not disabled.

>

> Is there another setting somewhere that need attenion for the account

> to be disabled on invalid login attemps.

>

> thanks,

> David

></span>

 

did you test right after you edited the GPO?

did you try to run a gpupdate /force before that?