Windows 11’s account security features include automatic account lockouts after multiple failed login attempts. While the default 10-minute lockout period works for most users, you might need a different duration based on your security requirements. Here’s how to modify this setting using two different approaches.
Method 1: Using local security policy editor
This method provides a graphical interface and is the most user-friendly way to adjust lockout settings.
- Access the Local Security Policy tool by pressing the Windows key, typing “Local Security Policy” and selecting the matching app from your search results.
- Navigate through the left sidebar by expanding “Account Policies” and selecting “Account Lockout Policy” to view available security options.
- Find and double-click the “Account lockout duration” option in the right panel.
- Set your preferred lockout duration (between 1 and 99,999 minutes) in the properties window. Select “Apply” followed by “OK” to implement the change. Setting this to 0 will require manual administrator intervention to unlock accounts.
Important: If the duration field appears grayed out, first check that your “Account lockout threshold” setting has a value above zero.
Method 2: Using windows terminal commands
This method offers a quick command-line alternative for users comfortable with terminal operations.
- Launch Terminal with administrative rights by searching for “Terminal” and choosing “Run as administrator” from the right-click menu.
- Confirm the User Account Control prompt by clicking “Yes” when it appears.
- Check current lockout settings with this command:
net accounts
- Modify the lockout duration using:
net accounts /lockoutduration:<number>
Replace <number> with your desired lockout duration in minutes. A 15-minute lockout period typically provides good security without excessive user inconvenience.