Protect the Account Lockout attributes for a user or multiple users (4378390)

Protect the Account Lockout attributes for a user or multiple users

1. Open CA Client
2. Select View and Administration from the menu
3. In the left pane, select Protection
4. Click on +Add button
5. Type a template name in Template Name field
6. Select a user or multiple users from the Forest
7. Click on Add button
8. The user or the multiple users get added in the lower pane. Make sure the Scope beside the user added is set as This object only.
9. Click Next button
10. In the (Optional) Select Attributes to Protect window, select the Only Selected checkbox
11. Under Attribute section , select lockoutDuration, lockOutObservationWindow, lockoutthreshold, lockoutTime, msDS-LockoutDuration, msDS-LockoutObservationWindow, and msDS-LockoutThreshold, and click on Add button. This will move the attributes to Selected Attributes section.
12. Click Next button
13. Leave default in (Optional) Select Attributes Flags to Protect wizard
14. Click Next button
15. In the (Optional) Select Accounts Allowed to Access Protected Objects wizard, add admin users whom you want to have external permission to makes changes to the user or users who were added in the step 6 and 7.
16. Click Next button
17. In the (Optional) Select Accounts Authorized to Manager this Protection Template wizard, add admin users whom you want to have external permission to makes changes to the template you are creating.
18. Click Next
19. Leave everything default in the (Optional) Schedule when protection is enabled wizard
20. Click Next
21. Leave everything default in the (Optional) Enable or disable protection for specific locations wizard
22. Click on Finish
23. Restart the Coordinator service.

 
Once you have performed these steps the user or the users you have added in the step 6 and 7 should never lockout.
 
Note: In the above step 6 if you are selecting an OU, which contains multiple users, then in the step 8 the Scope beside the OU added must be set as This Object and all Child objects.