7.Enabling Account Lockout Policy

 Enabling Account Lockout Policy

A computer running windows 2012 server Domain Controller.

A member server running windows server 2012 or Client running windows 7.

SYS1                                                                         SYS2

Domain Controller                                                 Member Server / Client

IP Address             10.0.0.1                                     IP Address            10.0.0.2

Subnet Mask          255.0.0.0                                  Subnet Mask         255.0.0.0

Preferred DNS      10.0.0.1                                      Preferred DNS    10.0.0.1

Steps:

1. Log on D.C as Administrator, click Press Windows Key to go to Start, select Group Policy Management.

2. Expand Forest -> Expand Domain -> Expand Microsoft.com -> right click  Default Domain Policy and select Edit.

3. Expand Computer Configuration  -> Expand  Policies -> Expand  Windows Settings -> Expand Security Settings -> Expand Account Policies -> Open Account Lockout Policy.

4. Double click Account lockout threshold.

5. Enter the Value for Number of invalid logon attempts(Ex: 2)

6. Set the Account lockout duration and click OK.

7. Close the Group Policy Management Window.

Verification:

1. Enter the Password for user (User1) windows wrongly for 2 times while logging in and the user account will be locked.