none
I need exclude some user from Account lockout policy

    Question

  • I have GPO : account lockout threshold apply to domain. So every user got this GPO. Then user is lockout when incorrect login.

    I need some user is allow  this policy. How can I exclude some user?

    I tried  add delegation for deny apply policy. It did't success.
    http://www.grouppolicy.biz/2010/05/how-to-exclude-individual-users-or-computers-from-a-group-policy-object/

    Saturday, December 03, 2016 6:29 PM

Answers

  • You can use FGPP for configure different password policies to specific users or groups.Check these;

    for server 2008 ; http://www.showmehowtodoit.com/step-by-step-fine-grained-password-policy-in-windows-2008/

    for server 2012 ; https://blogs.technet.microsoft.com/meamcs/2012/05/29/creating-fine-grained-password-policies-through-gui-windows-server-2012-server-8-beta/


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    • Marked as answer by SonkuB Tuesday, December 06, 2016 3:38 AM
    Sunday, December 04, 2016 6:04 PM
  • Hi

     You should configure FGPP (Fine-Grained Password Policies) to these specific users/groups,check these articles for details;

    https://technet.microsoft.com/en-us/library/cc770394(v=ws.10).aspx

    https://technet.microsoft.com/en-us/library/cc770842%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396

    But for FGPP dc needs to be least server 2008.


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    • Proposed as answer by Todd Heron Saturday, December 03, 2016 10:25 PM
    • Marked as answer by SonkuB Tuesday, December 06, 2016 3:38 AM
    Saturday, December 03, 2016 6:44 PM

All replies

  • Hi

     You should configure FGPP (Fine-Grained Password Policies) to these specific users/groups,check these articles for details;

    https://technet.microsoft.com/en-us/library/cc770394(v=ws.10).aspx

    https://technet.microsoft.com/en-us/library/cc770842%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396

    But for FGPP dc needs to be least server 2008.


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    • Proposed as answer by Todd Heron Saturday, December 03, 2016 10:25 PM
    • Marked as answer by SonkuB Tuesday, December 06, 2016 3:38 AM
    Saturday, December 03, 2016 6:44 PM
  • Hi

     You should configure FGPP (Fine-Grained Password Policies) to these specific users/groups,check these articles for details;

    https://technet.microsoft.com/en-us/library/cc770394(v=ws.10).aspx

    https://technet.microsoft.com/en-us/library/cc770842%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396

    But for FGPP dc needs to be least server 2008.


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    Thank

    If I have Account lockout threshod policy set to 3 times.

    Then I use ADAC to enable force Account lockout threshod set to 3 times. Right?

    Can I turn off Account lockout threshod policy for some user?

    Sunday, December 04, 2016 4:06 PM
  • You can use FGPP for configure different password policies to specific users or groups.Check these;

    for server 2008 ; http://www.showmehowtodoit.com/step-by-step-fine-grained-password-policy-in-windows-2008/

    for server 2012 ; https://blogs.technet.microsoft.com/meamcs/2012/05/29/creating-fine-grained-password-policies-through-gui-windows-server-2012-server-8-beta/


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    • Marked as answer by SonkuB Tuesday, December 06, 2016 3:38 AM
    Sunday, December 04, 2016 6:04 PM
  • You can use FGPP for configure different password policies to specific users or groups.Check these;

    for server 2008 ; http://www.showmehowtodoit.com/step-by-step-fine-grained-password-policy-in-windows-2008/

    for server 2012 ; https://blogs.technet.microsoft.com/meamcs/2012/05/29/creating-fine-grained-password-policies-through-gui-windows-server-2012-server-8-beta/


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    Thank you
    Tuesday, December 06, 2016 3:38 AM