How to Change Account Lockout Duration in Windows 11?

Windows 11 provides various security features to protect your device, one of which is the Account Lockout Duration setting. This feature temporarily locks an account after multiple unsuccessful login attempts, deterring unauthorized access. In this tutorial, we’ll cover all methods available to change the Account Lockout Duration in Windows 11, ensuring you can fine-tune your device’s security settings.

The Account Lockout Duration determines how long an account remains locked after too many incorrect password attempts. Configuring this setting can protect your device from brute force attacks while allowing legitimate users to regain access after a designated period.

Method 1: Using Local Group Policy Editor

The Local Group Policy Editor is one of the most straightforward ways to modify the lockout duration. Note that this feature is only available in Windows 11 Pro, Enterprise, and Education editions.

• 
  Open Local Group Policy Editor: Press Winkey + R to open the Run dialog, type gpedit.msc, and press Enter.

Navigating inside the GP Editor

• 
  Modify Lockout Duration:
  
  
  
  
  • Double-click on Account lockout duration and enter your desired lockout time in minutes.
  
  
  
  
  
  

Open Command Prompt using Run as Administrator

• Type the following command, replacing XX with the desired duration in minutes:
  
  
  
  
  • net accounts /lockoutduration:XX
  
  
  
  
  
  



• For example, to set the lockout duration to 15 minutes, you would enter:
  
  
  
  
  • net accounts /lockoutduration:15
  
  
  
  
  
  

Opening PowerShell as Admin Mode

• Type the following command, replacing XX with your desired duration:
  
  
  
  
  • Set-LocalUser -AccountExpirationDate "XX"
  
  
  
  
  
  

Running Regedit Command in Run Window

• 
  Navigate to the Key:
  
  
  
  
  • Go to HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account.
  
  
  
  
  
  

Open secpol.msc command in run window

• Go to Account Policies > Account Lockout Policy.
  


• Double-click Account lockout duration and set the desired time in minutes.


• Click Apply and OK to finalize your changes.

Conclusion

Modifying the Account Lockout Duration in Windows 11 can improve the security of your device by preventing unauthorized login attempts while ensuring legitimate users can regain access. Each method provided here whether via Group Policy Editor, Command Prompt, PowerShell, Registry Editor, or Local Security Policy, allows you to customize this setting according to your comfort and expertise level.

Frequently ASked Questions:

What is a good Account Lockout Duration?

A duration of 15 to 30 minutes is often recommended to deter repeated unauthorized attempts without significantly inconveniencing users.

What happens if I set the lockout duration to zero?

A zero value means the account remains locked until an administrator manually unlocks it.

Does changing the lockout duration affect all accounts?

Yes , this setting applies to all user accounts on the device.

Is it safe to change these settings?

Yes , but ensure you set a reasonable duration to avoid frustration if legitimate users accidentally trigger the lockout.

Can I set a different lockout duration for specific users?

Unfortunately , the Account Lockout Policy applies globally and cannot be set for individual users.