PSOs are applied to global groups or users - not possible to apply it to the domain per-se.
It's also possible that whatever you're testing this with is generating more than one failed logon attempt in a single transaction. This can happen, especially with older stuff. Thanks, Brian Desmond [email protected] c - 312.731.3132 -----Original Message----- From: [email protected] [mailto:[email protected]] Sent: Wednesday, August 17, 2011 10:49 AM To: NT System Admin Issues Subject: RE: 2008 r2 password policy not going into effect? I think I may have found why.. Looks like there migth be a fine grain policy applied to the domain. (under ADUC -> System -> Password Settings Container Checking... Original Message: ----------------- From: [email protected] [email protected] Date: Wed, 17 Aug 2011 11:43:18 -0400 To: [email protected] Subject: RE: 2008 r2 password policy not going into effect? I had already done that using the GPResults Wizards within the Group Policy Management. It shows the correct amount of retries, 10. Doing it from a computer, also shows 10 for retries too... Still get locked out after 3 attempts. JR Original Message: ----------------- From: Michael B. Smith [email protected] Date: Wed, 17 Aug 2011 15:18:06 +0000 To: [email protected] Subject: RE: 2008 r2 password policy not going into effect? Gpresult /R Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -----Original Message----- From: [email protected] [mailto:[email protected]] Sent: Wednesday, August 17, 2011 11:15 AM To: NT System Admin Issues Subject: 2008 r2 password policy not going into effect? Haven't seen this behaviour before. I have a single 2008 R2 domain controller. The 'Default Domain Policy' has the following setup: Account lockout duration: 5 minutes Account lockout threshhold: 10 invalid attempts Reset account lockout counter after:5 minutes The other GPOs (there's only about 4-5) listed in the Group Policy Management tool have NO password settings configured. Thing is, my users (mainly Windows 7 machines) STILL are getting locked out after 3 logon attempts, as opposed to 10. It seems like the settings are not going into effect. Anyone know where to begin looking? Thanks -------------------------------------------------------------------- mail2web.com - Microsoft(r) Exchange solutions from a leading provider - http://link.mail2web.com/Business/Exchange ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin -------------------------------------------------------------------- mail2web.com - Microsoft® Exchange solutions from a leading provider - http://link.mail2web.com/Business/Exchange ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin -------------------------------------------------------------------- mail2web LIVE - Free email based on Microsoft® Exchange technology - http://link.mail2web.com/LIVE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
