none
I need exclude some user from Account lockout policy

    Question

  • I have GPO : account lockout threshold apply to domain. So every user got this GPO. Then user is lockout when incorrect login.

    I need some user is allow  this policy. How can I exclude some user?

    I tried  add delegation for deny apply policy. It did't success.
    http://www.grouppolicy.biz/2010/05/how-to-exclude-individual-users-or-computers-from-a-group-policy-object/

    Saturday, December 3, 2016 6:29 PM

Answers

  • You can use FGPP for configure different password policies to specific users or groups.Check these;

    for server 2008 ; http://www.showmehowtodoit.com/step-by-step-fine-grained-password-policy-in-windows-2008/

    for server 2012 ; https://blogs.technet.microsoft.com/meamcs/2012/05/29/creating-fine-grained-password-policies-through-gui-windows-server-2012-server-8-beta/


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    • Marked as answer by SonkuB Tuesday, December 6, 2016 3:38 AM
    Sunday, December 4, 2016 6:04 PM
  • Hi

     You should configure FGPP (Fine-Grained Password Policies) to these specific users/groups,check these articles for details;

    https://technet.microsoft.com/en-us/library/cc770394(v=ws.10).aspx

    https://technet.microsoft.com/en-us/library/cc770842%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396

    But for FGPP dc needs to be least server 2008.


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    • Proposed as answer by Todd Heron Saturday, December 3, 2016 10:25 PM
    • Marked as answer by SonkuB Tuesday, December 6, 2016 3:38 AM
    Saturday, December 3, 2016 6:44 PM

All replies

  • Hi

     You should configure FGPP (Fine-Grained Password Policies) to these specific users/groups,check these articles for details;

    https://technet.microsoft.com/en-us/library/cc770394(v=ws.10).aspx

    https://technet.microsoft.com/en-us/library/cc770842%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396

    But for FGPP dc needs to be least server 2008.


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    • Proposed as answer by Todd Heron Saturday, December 3, 2016 10:25 PM
    • Marked as answer by SonkuB Tuesday, December 6, 2016 3:38 AM
    Saturday, December 3, 2016 6:44 PM
  • Hi

     You should configure FGPP (Fine-Grained Password Policies) to these specific users/groups,check these articles for details;

    https://technet.microsoft.com/en-us/library/cc770394(v=ws.10).aspx

    https://technet.microsoft.com/en-us/library/cc770842%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396

    But for FGPP dc needs to be least server 2008.


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    Thank

    If I have Account lockout threshod policy set to 3 times.

    Then I use ADAC to enable force Account lockout threshod set to 3 times. Right?

    Can I turn off Account lockout threshod policy for some user?

    Sunday, December 4, 2016 4:06 PM
  • You can use FGPP for configure different password policies to specific users or groups.Check these;

    for server 2008 ; http://www.showmehowtodoit.com/step-by-step-fine-grained-password-policy-in-windows-2008/

    for server 2012 ; https://blogs.technet.microsoft.com/meamcs/2012/05/29/creating-fine-grained-password-policies-through-gui-windows-server-2012-server-8-beta/


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    • Marked as answer by SonkuB Tuesday, December 6, 2016 3:38 AM
    Sunday, December 4, 2016 6:04 PM
  • You can use FGPP for configure different password policies to specific users or groups.Check these;

    for server 2008 ; http://www.showmehowtodoit.com/step-by-step-fine-grained-password-policy-in-windows-2008/

    for server 2012 ; https://blogs.technet.microsoft.com/meamcs/2012/05/29/creating-fine-grained-password-policies-through-gui-windows-server-2012-server-8-beta/


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    Thank you
    Tuesday, December 6, 2016 3:38 AM