In this lab, we will learn how to configure Windows accounts and security policies. Specifically, we will set password requirements, configure account lockout settings, and create a temporary user account that expires in one week.
NOTE: Once the lab is ready, please wait 4-5 additional minutes before attempting to remote desktop to the Windows machine. Prior to that, the provided credentials will not work. This is because the Windows machine runs several preparation scripts once it starts.
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Set password requirements on the local server.
NOTE: Once the lab is ready, please wait 4-5 additional minutes before attempting to remote desktop to the Windows machine. Prior to that, the provided credentials will not work. This is because the Windows machine runs several preparation scripts once it starts.
- Open the Server Manager.
- From the Tools menu, select Local Security Policy.
- Expand Account Policies, and select Password Policy.
- Configure the following:
- Maximum password age = 180 days
- Minimum password age = 3 days
- Minimum password length = 12 characters
- Configure the account lockout settings.
- Open the Server Manager.
- Click Tools, and select Local Security Policy.
- Expand Account Policies, and select Account Lockout Policy.
- Set the following values:
- Account lockout threshold = 3 invalid logon attempts
- Account lockout duration = 10 minutes
- Create a temporary user account.
Create a temporary user account called
contractor1that will expire one week from today.- Open the Command Prompt as Administrator.
- Run the following commands (remember to replace
<MM/DD/YYYY>with the date one week from today):net user contractor1 Pinehead123abc! /add net user contractor1 /expires MM/DD/YYYY
