Group Policy Set Win8 Account Login Error Limit and Lock Time

For security reasons, some important applications such as online banking system will set the login limit. For example, if the password is incorrectly input 5 times during the user login process, it will be frozen. Or prohibit login for a period of time. Microsoft's Windows 8 system provides the security mechanism for the number of account logins. However, this feature is disabled by default. Users who have special requirements for system security and data privacy can use the Group Policy setting to enable the account login error limit. And specify the maximum number of login errors and system lock time.

Press the shortcut key “Win+R” in the Win8 start screen or the traditional desktop, and enter “lded;gpedit.msc” in the running window to prepare to enter the Win8 system group policy editor.

In the Win8 system, "local group policy editor", then open "ldquo; computer configuration & mdash; Windows settings & mdash; security settings & mdash; account lockout strategy", you can see the right "account lock" The threshold & rdquo; is 0, the account lockout time and the reset account lockout counter are both "not applicable”. Double-click “Account Lockout Threshold” or select “Properties” from the context menu.

In the “Account Lockout Threshold Properties” Settings dialog, click “Local Security Settings”, you can see that the default setting is  0 invalid logins", that is, no lock. Enter the number here, this number is the maximum number of incorrect logins set for the Win8 system. Then click “confirm” or“apply”

This security setting determines the number of failed login attempts that caused a user account to be locked. This locked account cannot be used until the administrator resets the locked account or the account lockout time expires. You can set the number of failed login attempts to a value between 0 and 999. If you set the value to 0, the account will never be locked.

Note: Failure attempts on passwords on workstations or member servers locked with Ctrl+Alt+Del or password-protected screen savers will also count as failed login attempts.

After we set the maximum number of account error logins, the Win8 system will automatically give the recommended value for the account lockout time and reset account lockout counter time. If the number of incorrect logins reached the upper limit we set when the account was logged in, the Win8 system will lock the account as follows.

After confirming the value changes, we can see the corresponding option value change from the Win8 Local Group Policy Editor. If you need to change your account lockout time, you can double-click the option to reset the account lockout time or the account lockout counter.

“The security settings for resetting the account lockout counter after this time determine the time required to reset the login attempt failure counter to 0 before the login attempt failed, the available range is 1 to 99999 minutes. If an account lockout threshold is defined, this reset time must be less than or equal to the account lockout time. The default value is “no”. This policy setting only makes sense after the account lockout threshold is specified.

We have introduced how to set the number of account login error limits and lock time for Win8 system through Group Policy Editing. Friends who have high requirements for system security can choose to use.