How to Change Reset Account Lockout Counter After Time in Windows 11

What Is Account Lockout?

Account lockout is a security feature in Windows that stops people from guessing your password too many times. It prevents unauthorized access by locking the account after too many failed login attempts.

The Account Lockout Policy settings control when an account gets locked and what happens afterward.

Important Policy Settings

Windows includes several account lockout settings to bolster your computer’s security. These control the number of incorrect password attempts allowed, the duration of an account lockout, and when the lockout counter automatically resets.

Account lockout duration specifies how many minutes a locked account stays inaccessible before it unlocks automatically. Administrators also have the option to unlock an account sooner than the set duration.

Reset account lockout counter after: This is the number of minutes that must pass after a failed login attempt for the counter to reset to zero.

Allow Administrator account lockout: This determines if the built-in Administrator account itself can be locked out.

Why This Matters

Understanding account lockout is important because it acts as a shield against password guessing. It stops automated programs from cracking your password and prevents someone from intentionally locking you out of your own computer.

References:

Account Lockout Policy – Windows 10

This link describes the Account Lockout Policy settings and provides information about each setting.

Reset account lockout counter after – Windows 10

This page describes best practices, location, values, and security considerations for the ‘Reset account lockout counter after’ security policy setting.

New 🪟 Windows 11 Defaults

Starting with Windows 11 build 22528 and higher, the defaults are now:

• Account lockout threshold: 10 failed tries
• Account lockout duration: 10 minutes
• Allow Administrator account lockout: Enabled
• Reset account lockout counter after: 10 minutes

Option 1Use Local Security Policy

You can adjust account lockout settings using the Local Security Policy tool (also known as ‘secpol.msc’) on Windows 10 and 11 Pro, Enterprise, and Education editions. This tool allows you to configure how many incorrect password attempts will lock your account.

1. Open Local Security Policy. Press the Windows key and search for secpol.msc. Click it to open. ⚠️ Requires admin privileges
2. Find Account Lockout Policy. In the left pane, click on Account Policies to expand it. Then click on Account Lockout Policy.
3. Open Reset account lockout counter after. In the right pane, double-click on “Reset account lockout counter after” to open it.
4. Enter the new time. Type a number between 1 and 99999 minutes. This is how long must pass before the failed login counter resets to zero. Click OK.

5. Check Account lockout duration. If Reset account lockout counter after is set higher than Account lockout duration, a popup will show suggested values. Click OK to confirm and update Account lockout duration.
6. Change other settings (optional). You can also change Account lockout duration, Account lockout threshold, and Allow Administrator account lockout here.
7. Close the window. When done, close Local Security Policy if you want.

Option 2Use Windows Terminal

For Windows Home users, or those without Pro, Enterprise, or Education editions, Windows Terminal offers an alternative. You can manage account lockout settings by opening Windows Terminal as an administrator and using commands like ‘net accounts’.

1. Open Windows Terminal as admin. Press the Windows key and search for Windows Terminal. Right-click it and select “Run as administrator.” ⚠️ Requires admin privileges Select either Windows PowerShell or Command Prompt.
2. Check current settings. Copy and paste this command and press Enter:
   net accounts
   

   Look for “Lockout observation window (minutes)” to see the current setting.

3. Change the setting. Copy and paste this command and press Enter:
   net accounts /lockoutwindow:<number>
   Replace <number> with a number between 1 and 99999 minutes. For example: net accounts /lockoutwindow:10

Important: First, make sure the ‘Account lockout threshold’ is enabled. Also, ensure the ‘Lockout duration’ (in minutes) is greater than or equal to the ‘Lockout observation window’ (in minutes). The default is 10 minutes.

4. Change other settings (optional). You can also change Account lockout threshold, Allow Administrator account lockout, and Reset account lockout counter after policies with other commands.
5. Close Windows Terminal. When done, close Windows Terminal if you want.

Summary

Account lockout is a vital security feature that locks your Windows account after too many incorrect password attempts. You can adjust these settings, including how long the counter resets, using either the Local Security Policy tool on specific Windows editions or Windows Terminal on any edition.