Group Policy Set Win8 Account Login Error Limit and Lock Time

  
For security reasons, some important applications such as online banking systems will set the number of logins. For example, if the password is incorrectly entered 5 times during the user login process, it will be frozen or disabled for a period of time. Microsoft's Windows 8 system provides the security mechanism for the number of account logins. However, this feature is disabled by default. Users who have special requirements for system security and data privacy can use the Group Policy setting to enable the account login error limit. And specify the maximum number of login errors and system lock time.

In the Win8 start screen or traditional desktop, press the shortcut key "Win+R", enter "lded;gpedit.msc" in the run window, ready to enter the Win8 system group policy editor.












































  The threshold & rdquo; is 0, the account lockout time and the reset account lockout counter are both "not applicable”. Double-click “Account Lockout Threshold” or select “Properties” from the context menu.

In the "Account Lockout Threshold Properties" dialog box, click "“Local Security Settings" to see the default setting is "0 invalid logins", that is, not locked. Enter the number here, this number is the maximum number of incorrect logins set for the Win8 system. Then click “confirm” or“apply”
This security setting determines the number of failed login attempts that caused the user account to be locked. This locked account cannot be used until the administrator resets the locked account or the account lockout time expires. You can set the number of failed login attempts to a value between 0 and 999. If you set the value to 0, the account will never be locked.
Note: A failed password attempt on a workstation or member server locked with a Ctrl+Alt+Del or password-protected screen saver will also count as a failed login attempt.


When we set the maximum number of incorrect logins for the account, the Win8 system will automatically give the recommended value for the account lockout time and reset account lockout counter time. If the number of incorrect logins reached the upper limit we set when the account was logged in, the Win8 system will lock the account as follows.

After confirming the value changes, we can see the corresponding option value changes from the Win8 Local Group Policy Editor. If you need to change your account lockout time, you can double-click the option to reset the account lockout time or the account lockout counter.
 Reset the account lockout counter" security setting to determine the time required to reset the login attempt failure counter to 0 error login attempts after a login attempt failure, the available range is 1 to 99999 minutes. If an account lockout threshold is defined, this reset time must be less than or equal to the account lockout time. The default value is “no”. This policy setting only makes sense after the account lockout threshold is specified.

The above we have introduced how to set the number of account login error limits and lock time for the Win8 system through Group Policy Editing. Friends who have high requirements for system security can choose to use.

Copyright © Windows knowledge All Rights Reserved