Forum Discussion

Hyugai_Neji's avatar
Hyugai_Neji
Copper Contributor
Dec 11, 2022
Solved

Set account lockout threshold for AADJ laptop in intune

in the past, we used to have GPO for our laptop/desktop so that when someone enter wrong password to login to their computer domain joined, after 5 times failed attempt - it will lock their account for 30 mins. 

But how do we do this for our AAD joined computer?

We just recently moved to intune and when user login to their computer, it is locally authenticated by their computer. Ideally, we would want the same experience as well. so that when the user enter wrong password for 5 times, it will lock their account for 30 mins. 

Can we do this in intune?

  • Hi Hyugai,

    Try this:

    In Intune go to Configuration Profiles
    1. Create a new profile
    2. Select Settings Catalog
    3. Click on Add Setting and search for "Device Lock"
    4. Click open Device Lock and activate " Enable Device Password "

    Here you can find the settings to lock a device or user.
  • vlc2023's avatar
    vlc2023
    Copper Contributor
    Hi Hyugai!

    I checked the option that said Turqay, but I can't see the option of lock account in a time interval. Finally, how did you solved it? Thanks!
  • TurqayGencay's avatar
    TurqayGencay
    Copper Contributor
    Hi Hyugai,

    Try this:

    In Intune go to Configuration Profiles
    1. Create a new profile
    2. Select Settings Catalog
    3. Click on Add Setting and search for "Device Lock"
    4. Click open Device Lock and activate " Enable Device Password "

    Here you can find the settings to lock a device or user.

Resources