RE: [ActiveDir] Problem in account lockout duration !!

[joe]

The lockout policy on domains applies to the domain NC object and sets the following three attributes

 

lockoutDuration
lockoutThreshold
lockoutTime

 

I.E. Lockout policy for domain user accounts is domain wide. You can not set different policies for different users in the same domain via OU GPOs or any other mechanism.

 

   joe

---

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Senthil Kumar
Sent: Wednesday, March 02, 2005 2:29 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Problem in account lockout duration !!

Hi,

I have installed acctinfo.dll in all my win2k3 domain controllers in my domain. In the additional account info tab when I click Domain PW info button it shows the acount lock out duration 30 minutes which I have set for my default domain policy. But I have created an additional OU and placed that user inside that OU, which is having a separated group policy with the setting of no override and having 5 minutes account lock out duration. Now I want to know which one will be effective for the user either Domain policy or OU group policy.

 

 

Regards,

 

K.SENTHIL KUMAR

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com