3.5 Enabling Account Lockout Policy

Pre-Requisites:-

        Before working on this lab You must have

1. A Computer running windows 2008 domain controller.
2. A Computer running Windows 2008 Server or Windows 7.

System 1:

Domain Controller

IP address:- 10.0.0.1

Subnet Mask :- 255.0.0.0

Preferred DNS:- 10.0.0.1

System 2:

Member Server/Client

IP address 10.0.0.2

Subnet Mask:- 255.0.0.0

Preferred DNS:- 10.0.0.1

                                                  

 Lab 5

1. Login as Administrator to Domain Controller.
2. Click Start → Programs → Administrative Tools → Group policy Management Console.
3. Expand Forest → Expand Domains → Expand Microsoft.com → Right click Default Domain Policy. And Select Edit.
4. Expand Computer Configuration → Expand Policies → Expand Windows Settings → Expand Security Settings → Expand Account Policies → Open Account Lockout Policy.
5. Double Click Account lockout threshold.
6. Enter the Value for Number of Invalid logon Attempts.
7. Set the Account lockout Duration and click OK.
8. Close the Group Policy Managment Windows.

                                           

   Verification

1. Enter the Password for User(User1 ) wrongly 2 times while loggingin and the user account will be locked.

Unlocking the Locked User Account Manually.

1. Login as Administrator to Domain Controlller.
2. Click Start → Programs → Administrative tools → Active Directory Users and Computers.
3. Right Click the User (User 1) and Select Properties.
4. Check the Box Unblock Account → Click Apply and OK

                                              

Verification

1. Login in as User(User 1) in Client or Member Server.