Account lockout duration


Account lockout duration

This security setting determines the number of minutes a locked-out account remains locked out before automatically becoming unlocked. The available range is from 0 minutes through 99,999 minutes. If you set the account lockout duration to 0, the account will be locked out until an administrator explicitly unlocks it.

If an account lockout threshold is defined, the account lockout duration must be greater than or equal to the reset time.

Default: None, because this policy setting only has meaning when an Account lockout threshold is specified.


Policy Path: Account Lockout
Policy Setting Name: Account lockout duration

See Also

Item Details


References: 800-53|AC-7a., CSCv6|16.7

Plugin: Windows

Control ID: fa4a2ddba17de98bf5e306af2c834f977a40ad897802d8f2d863187a7c132c3e