Windows 10: Change Account Lockout Threshold for Local Accounts in Windows 10

How to: Change Account Lockout Threshold for Local Accounts in Windows 10

How to Change Account Lockout Threshold for Local Accounts in Windows 10


Information The Reset account lockout counter after.

Failed password attempts on workstations or member servers that have been locked by using CTRL+ALT+DELETE or password-protected screen savers do not count as failed sign-in attempts unless Interactive logon: Require Domain Controller authentication to unlock workstation is set to Enabled. If Interactive logon: Require Domain Controller authentication to unlock workstation is enabled, repeated failed password attempts to unlock the workstation will count against the account lockout threshold.

Brute force password attacks can be automated to try thousands or even millions of password combinations for any or all user accounts. Limiting the number of failed sign-ins that can be performed nearly eliminates the effectiveness of such attacks. However, it is important to note that a denial-of-service (DoS) attack could be performed on a domain that has an account lockout threshold configured. A malicious user could programmatically attempt a series of password attacks against all users in the organization. If the number of attempts is greater than the value of Account lockout threshold, the attacker could potentially lock every account.

This tutorial will show you how to change the Account lockout threshold to lock out a local account after a specified number of invalid sign-in attempts to Windows 10.

You must be signed in as an administrator to change the Account lockout threshold.


CONTENTS:

• Option One: To Change Account Lockout Threshold for Local Accounts using Local Security Policy
• Option Two: To Change Account Lockout Threshold for Local Accounts using Command Prompt

EXAMPLE: "The referenced account is currently locked out and may not be logged on to" error









OPTION ONE [/i] To Change Account Lockout Threshold for Local Accounts using Local Security Policy


Note Local Security Policy is only available in the Windows 10 Pro, Enterprise, and Education editions.

All editions can use Option Two below.


1. Press the Win+R keys to open Run, type secpol.msc into Run, and click/tap on OK to open Local Security Policy.

2. Navigate to Account Policies and Account Lockout Policy in the left pane of Local Security Policy. (see screenshot below)



3. In the right pane of Account Lockout Policy, double click/tap on the Account lockout threshold policy. (see screenshot above)

4. Type in a number between 0 and 999 for how many invalid sign-in attempts you want before the account will be locked out after, and click/tap on OK. (see screenshots below)


Note The default setting is 0 invalid sign-in attempts for local accounts to never be locked out.







5. If the Account lockout threshold was originally set to 0 or you just set to 0 invalid sign-in attempts, then click/tap on OK. (see screenshots below)





6. When finished, you can close the Local Security Policy window if you like.

7. If you like, you can change the Reset account lockout counter after policies to what you want instead of the default 30 minutes.




OPTION TWO [/i] To Change Account Lockout Threshold for Local Accounts using Command Prompt
1. Open an elevated command prompt.

2. Enter the command below into the elevated command prompt, press Enter, and make note of the current Lockout threshold. (see screenshot below)
*Arrow net accounts




3. Enter the command below into the elevated command prompt, and press Enter. (see screenshot below)
*Arrow net accounts /lockoutthreshold:Number



Note Substitute Number in the command above with a number between 0 (none) and 999 for how many invalid sign-in attempts you want before the account will be locked out after.

The default setting is 0 invalid sign-in attempts for local accounts to never be locked out.





4. When finished, you can close the elevated command prompt if you like.

5. If you like, you can change the Reset account lockout counter after policies to what you want instead of the default 30 minutes.

That's it,
Shawn


Related Tutorials

• How to Sign in to Windows 10
• How to Change Account Lockout Duration for Local Accounts in Windows 10
• How to Change Reset Account Lockout Counter for Local Accounts in Windows 10
• How to Unlock a Local Account in Windows 10
• How to Enable or Disable Password Expiration for Local Accounts in Windows 10
• How to Add Password to Local Account in Windows 10
• How to Allow or Prevent User to Change Password in Windows 10
• How to Change Password of Local Account or Microsoft Account in Windows 10
• How to Change Maximum and Minimum Password Age for Local Accounts in Windows 10
• How to Change Minimum Password Length for Local Accounts in Windows 10
• How to Enforce Password History for Local Accounts in Windows 10
• How to Force Local Account to Change Password at Next Sign-in in Windows 10
• How to Reset Password of Local Account or Microsoft Account in Windows 10
• How to Remove Password of Local Account in Windows 10

:)

 

Reset a account login counter/lockout threshold in Windows 10 Home

Hi Nedaro. I'm Greg, an installation specialist, 10 year Windows MVP, and Guardian Moderator here to help you.

See fixes for Account lockout threshold here:

https://www.tenforums.com/tutorials/87609-chang...

I hope this helps. Feel free to ask back any questions and keep me posted. I will keep working with you until it's resolved.

________________________________________________________

Standard Disclaimer: There are links to non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the sites that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly
research any product advertised on the sites before you decide to download and install it.

 

Account Lockout Policy is not working


Hello guys,

I have Windows 10 Enterprise build 10240 on my Dell Tablet (32 bit) and Oracle VM (32 bit). On both system, I tried to setup Account Lockout Policy in Local Security Policy. I have Account Lockout Threshold = 5, Lockout Duration and Reset Lockout Account Counter = 30 min. However, after locking my account or signing off, my account is not locked after 5 and more failed logon attempts. This feature worked correct on my Windows 8.1 system with the same account lockout settings.
Does anyone experienced the same behavior? Any explanation or fix?

Thank you very much,

 

Strange Windows 10 User Account issue.

Unfortunately I had done those steps numerous reboots, it just, reappears for no good reason. The base account isn't even a Microsoft account, it's a local account.

I haven't quite tried the built in administrator account on W10, but so far in my experience on my own computer, the built in account seemed to have absolutely no more control than I did on my own.

It's just strange, I go in, it warns me twice about deleting the account, then it's gone. Reboot, and it's back?

EDIT: Just to specify, both command line and Netplwiz both say only HIS account exists on the computer, it doesn't list this rogue account. This is what I meant in my first post about the fact that even Windows doesn't seem to believe it exists, HALF the time. *Frown

 

Reset a account login counter/lockout threshold in Windows 10 Home

Hi there, thanks for the immediate response. Please be informed that I have already tried this approach, but unfortunately, I still cannot access the user access I have identified. Perhaps you have other ways or solutions to offer, this would be much of a great
help, as I am open to explore any ideas I have yet to try/apply for the resolution of this issue. Thanks.

 

Interactive logon: Machine account lockout threshold?


Machine Lockout refers to the password of the Local User Accounts - not BitLocker