Verifying Active Directory Account Lockout

The following section outlines how to verify your on-premises AD DS account lockout policy. The steps below need to be carried out on a domain-joined system with administrator privileges:

  1. Open the Group Policy Management Editor by clicking the start menu and searching for Edit group policy.
  2. Edit the group policy that includes your organization's account lockout policy, such as the Default Domain Policy.
  3. Navigate to Computer Configuration>Policies>Windows Settings>Security Settings>Account Policies>Account Lockout Policy.
  4. Verify your Account lockout threshold and Reset account lockout counter after values. Alt text