Account Lockout does not work on workstations.

Archived from groups: microsoft.public.win2000.group_policy (More info?)

To set account policies that will have effect on machine
local accounts, use a GPO that is linked at the OU instead
of the domain level.

--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Lee Yew" <tanly@msee.com.my> wrote in message
news HNUrxoNFHA.3728@TK2MSFTNGP10.phx.gbl...
> I have 1 domain server and several workstations, running on Windows 2000
> server and pros. The workstations normally log on to the local computer
> instead of the domain computer( but it is joined to the domain controller
> for some reasons).
>
> Recently i've set the account lockout threshold as 3 invalid and logon
> attempt , account lockout duration and reset lockout as 15 minutes. i can
> see that both the local and effective settings the same now. Now the
problem
> is, it doesn't apply to the local computer/workstation. I know that it
will
> run if the workstations logs in to the domain directly. How do i set it
> without logging in to the domain?
>
> Tan.
>
>