FIM Portal Lockout settings and AD Group policy lockout settings! RRS feed

  • Question

  • Dears,

    The AD lockout settings and the FIM portal settings are same? can they be synced? if not can we sync them? and do they make any issues if I have a conflict between FIM lockout and A lockout?



    Thursday, March 10, 2016 6:08 AM

All replies

  • If you refer to lockout settings in Self-Service Password Reset, then those are not related to account lockout policy in AD. The first specifies how many unsuccessful password reset attempts are allowed before FIM locks the account. Password policy specifies how many unsuccessful logon attempts (with wrong password) are allowed before account is locked. So, these are basically two different activities that can result in account being locked. There will be no issues if the two settings are different, but it might be easier for users to understand the policy if the same settings are used for both SSPR lockout and account logon policy.


    Thursday, March 10, 2016 8:34 AM