Local Lockout Policy and NT4

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

I have a Windows XP Pro laptop user that needs to have his account lock after
5 attempts. The user is logging into a NT4 domain, and when he travels he
logs into the cached profile with his standard username and domain. Our NT4
server has been setup to lock the account after 5 failed attempts, and I have
changed the local policy on his laptop to lock the account after 5 attempts.

What happens is that when you take the laptop off the network, you can log
in 5 times, the 6th time you have to wait for about 2 minutes, then you can
continue to attempt to log in as many times as you want. Is there a way to
lock out the account on the laptop after 5 failed attempts?

Any help with this would be greatly appreciated.

Thanks,

Tim

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

It appears that the account lockout policy will apply to local users, but it
will not apply to NT 4.0 cached users. Is this an issues with NT 4 vs. Win
XP? Does the behaviour change going to Active Directory?

Anyone's assistance with this is greatly appreciated.

Thanks,

Tim

"TimsterNT4" wrote:

> I have a Windows XP Pro laptop user that needs to have his account lock after
> 5 attempts. The user is logging into a NT4 domain, and when he travels he
> logs into the cached profile with his standard username and domain. Our NT4
> server has been setup to lock the account after 5 failed attempts, and I have
> changed the local policy on his laptop to lock the account after 5 attempts.
>
> What happens is that when you take the laptop off the network, you can log
> in 5 times, the 6th time you have to wait for about 2 minutes, then you can
> continue to attempt to log in as many times as you want. Is there a way to
> lock out the account on the laptop after 5 failed attempts?
>
> Any help with this would be greatly appreciated.
>
> Thanks,
>
> Tim