|
TAG:activedirectoryaccount activedirectoryusers windowsserver2003activedirectory配置指南
2008-05-11
Active directory 2003 - locked-out accounts are not unlocking automatically.I've set my domain as follows: Account lockout duration: 60 minutes Account lockout threshold: 10 invalid logon attempts Reset account lockout counter after: 60 minutes However, accounts that got locked-out are not automatically unlocked after 60min. In ADUC the checkob for unlock user is greyed but I can list tha account with the following LDAP query: (&(&(&(&(objectCategory=person)(objectClass=user)(lockoutTime:1.2.840.113556.1.4.804:=4294967295))))) ...... 更多内容请看 活动目录网络管理日志 http://gnaw0725.blogbus.com/
|