Account Lockout Duration
|ID: oval:gov.nist.usgcb.windowsseven:def:1||Date: (C)2012-04-13 (M)2018-02-19|
|Class: COMPLIANCE||Family: windows|
This security setting determines the number of minutes a locked-out account remains locked out before automatically becoming unlocked. The available range is from 0 minutes through 99,999 minutes. If you set the account lockout duration to 0, the account will be locked out until an administrator explicitly unlocks it.
If an account lockout threshold is defined, the account lockout duration must be greater than or equal to the reset time.
Default: None, because this policy setting only has meaning when an Account lockout threshold is specified.
The amount of time in seconds that an account is locked before it is automatically unlocked by the system. 15 minutes = 900 seconds. A value of 0 means that an administrator must unlock the account.
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Account Policies\Account Lockout Policy\Account lockout duration
(2) REG: INFO NOT AVAILABLE
|Microsoft Windows 7|