Windows Forum

Ask something
Discussion Locked

Setting Account lockout Policy

0 helpful
5 replies

by myteinfo

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Account policies
I run Windows 2000 server at home, SP1 with Active Directory. I created lokout policy from MMC console and tested it. It did not work. When I went to domain security from program menu, the account lockout policy displays as"not define". I create it again and put the previous account lockout policy as " not define" at MMC console. I tested it. It the acccount lockout policy works when I set it at Domain Security policy.

Now I found another menu "Domain Controller Security"from program menu. I see another "account lockout policy" display as "not define"

So far, I have seen the Account Lockout Policy in three different areas: MMC(I added it), Domain Security Policy, and Domain Controller Security Policy.

Does anyone knows their differences and their control abilities.

Thanks for any recommendations.

5 replies

by bentgellerich

When you added the Domain Security Policy to your mmc, it should have connected to your DC and changed the lockout policy. The difference between "Domain Security Policy" and "Domain Controller Security Policy" is the Domain Controller Security Policy is used to view and modify security policy for the Domain Controllers organizational unit and the Domain Security Policy is used to view and modify security policy for the domain, such as user rights and audit policies.

by pxttocyob

It seems that these all do the same thing. It's just very convoluted and redundant so that it will consume more resources.

This discussion is closed to new replies.