Windows 10: How to set 'Account lockout duration' with an intune device policy

Good morningFor the Security Recommendation "Set 'Account lockout duration' to 15 minutes or more" I want to deploy this setting with the value "15" as a device configuration policy. I know I can set the LockoutPolicy with a OMA-URI "./Device/Vendor/MSFT/Policy/Config/DeviceLock/AccountLockoutPolicy" but how can I set the specific account lockout duration setting? Thanks in advance and have a good day!

:)

 

Is there an equivalent to the 'Account lockout threshold' security policy setting for Windows 10 Home users?

My understanding is that Windows 10 Home users don't have access to the Account lockout threshold security policy setting (and by extension the Account lockout duration policy setting) because Local Security Policy isn't available in Windows 10 Home. Is
there an equivalent setting available that will allow me to set a threshold for login attempts and lockout duration on my laptop?

 

Account Lockout Policy is not working


Hello guys,

I have Windows 10 Enterprise build 10240 on my Dell Tablet (32 bit) and Oracle VM (32 bit). On both system, I tried to setup Account Lockout Policy in Local Security Policy. I have Account Lockout Threshold = 5, Lockout Duration and Reset Lockout Account Counter = 30 min. However, after locking my account or signing off, my account is not locked after 5 and more failed logon attempts. This feature worked correct on my Windows 8.1 system with the same account lockout settings.
Does anyone experienced the same behavior? Any explanation or fix?

Thank you very much,

 

Registry Settings to lockout too many Remote Desktop login attempts?

You cannot specify separate lockout settings for access via RDP vs. the physical console. Account lockout settings apply to the account, not the logon method.

Perhaps a way to achieve your goal would be to have a second admin user account configured on the machine that is denied access through Remote Desktop (thus mitigating the possibility of getting locked out) and use that account to unlock the first when required.

Alternate Solution

If you have the Pro or Enterprise version of Windows, you can configure the account lockout duration such that locked out accounts are automatically unlocked after a specified amount of time:

1. In Start search and run the Local Security Policy app.
   
2. Navigate to Account Policies/Account Lockout Policy.
   
   
   
   
   
3. Set the Account lockout threshold setting to a non-zero value (otherwise you cannot configure the other settings in this branch).
   
4. Configure the Account lockout duration setting as desired.