Configuring Extranet Smart Lockout
This recipe shows how to configure Extranet Smart Lockout on an Active Directory Federation Services (AD FS) farm running Windows Server 2016 or newer versions.
Getting ready
When using AD FS on Windows Server, ensure that at least the June 2018 cumulative update for Windows Server 2016 (KB4284880 – https://support.microsoft.com/en-us/help/4284880/windows-10-update-kb4284880 – and OS Build 14393.2312) is installed on all AD FS servers in the AD FS farm.
Sign in with an account that is an AD FS administrator. By default, members of the Domain Admins group have the required permissions.
Sign in to the primary AD FS server when the AD FS farm is using the Windows Internal Database (WID) as its replication model, or any AD FS server when the AD FS farm leverages SQL Server as its configuration database.
How to do it...
To enable Extranet Smart Account Lockout for an AD FS farm running SQL Server, run the following lines...