Group Policy Set Win8 Account Login Error Limit and Lock Time

Author: Shiny

For security reasons, some of the more important applications such as online banking system will be set up to log the number of restrictions, such as would be frozen for some time or if the wrong password is entered five times in the user login process Login is prohibited. Microsoft's Windows 8 system provides the security mechanism for the number of account logins. However, this feature is disabled by default. Users who have special requirements for system security and data privacy can use the Group Policy setting to enable the account login error limit. And specify the maximum number of login errors and system lock time.

Press the shortcut key "Win+R" in the Win8 start screen or the traditional desktop, enter "lded;gpedit.msc" in the run window, ready to enter the Win8 system group policy editor .

In the Win8 system, "local group policy editor", then open "ldquo; computer configuration & mdash; Windows settings & mdash; security settings & mdash; account lockout strategy", you can see the right side of the "ld" The account lockout threshold is 0, the account lockout time, and the reset account lockout counter are both "not applicable”. Double-click “Account Lockout Threshold” or select “Properties” from the context menu.

In the "Account Lockout Threshold Properties" setting dialog, click “Local Security Settings”, you can see the default setting is “0 invalid login”, that is Not locked. Enter the number here, this number is the maximum number of incorrect logins set for the Win8 system. Then click “confirm” or“apply”

This security setting determines the number of failed login attempts that caused a user account to be locked. This locked account cannot be used until the administrator resets the locked account or the account lockout time expires. You can set the number of failed login attempts to a value between 0 and 999. If you set the value to 0, the account will never be locked.

Note: Failure attempts on passwords on workstations or member servers locked with Ctrl+Alt+Del or password-protected screen savers will also count as failed login attempts.

After we set the maximum number of incorrect logins for the account, the Win8 system will automatically give the recommended value for the account lockout time and reset account lockout counter time. If the number of incorrect logins reached the upper limit we set when the account was logged in, the Win8 system will lock the account as follows.

After confirming the value changes, we can see the corresponding option value change from the Win8 Local Group Policy Editor. If you need to change your account lockout time, you can double-click the option to reset the account lockout time or the account lockout counter.

“The security settings for resetting the account lockout counter after this time determine the time required to reset the login attempt failure counter to 0 before the login attempt failed, the available range is 1 to 99999 minutes. If an account lockout threshold is defined, this reset time must be less than or equal to the account lockout time. The default value is “no”. This policy setting only makes sense after the account lockout threshold is specified.

We have introduced how to set the number of account login error limits and lock time for Win8 system through Group Policy Editing. Friends who have high requirements for system security can choose to use.