Active Directory comes with a built-in password policy. Admins can configure stricter password policies and account lockout policies. This way, privileged accounts can be configured with more secure password and account lock-out settings. This recipe shows how.
Applying fine-grained password and account lockout policies
Getting ready
To apply fine-grained password and account lockout policies, you should sign into a domain controller or a member server and/or device with the Remote Server Administration Tools (RSAT) for Active Directory Domain Services installed. Ideally, the domain controller or member server runs Windows Server 2012, or a newer version of Windows Server.
Sign in with an account that is a member of the Domain...
