Microsoft KB Archive/300381

= Description of Why Windows 2000 Changes the Set Value of a Security Template Variable =

PSS ID Number: 300381

Article Last Modified on 6/6/2003

-

The information in this article applies to:


 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Professional

-



This article was previously published under Q300381



SUMMARY
This article describes why Windows 2000 changes the settings of the Security template if the  variable is greater than the   variable.



MORE INFORMATION
There are three variables to which you assign a value in the Account Lockout policy. The  variable sets the number of attempts that a user can make to log on before the account is locked. The  variable sets the length of time that must pass before the   is reset to zero. The  variable sets the length of time that must pass before an account is unlocked and a user can try to log on again. When you configure the Account Lockout policy on a Windows 2000 Server-based computer, you can set any value you want for each variable. However, if the value for  is greater than the value that is set for , Windows automatically adjusts this value to be less than or equal to the value of. Windows does this to avoid a conflict in the security policy. If you could set  to a value that is greater than the   value,   would end first, and make it possible for the user to log back on. However, the  variable would continue to count down. Because of this, the  would remain at the maximum of three invalid attempts, and the user would not be able to log on. To avoid this situation, Windows automatically resets the  value to be equal to the   value. Windows does this without informing you that the security setting has been changed.

Keywords: kbinfo KB300381

Technology: kbwin2000AdvServ kbwin2000AdvServSearch kbwin2000Pro kbwin2000ProSearch kbwin2000Search kbwin2000Serv kbwin2000ServSearch kbWinAdvServSearch

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© 2004 Microsoft Corporation. All rights reserved.