BadLogonCount and LastBadPasswordAttempt

hi all,

i can't seem find information on msdn these properties. 

i trying find out mean , updates them etc. assume lastbadpasswordattempt user enters his/her username/password incorrectly.  but the badlogoncount property, causes counter increment one? updated when user fails incorrect user/pass 3 times or whatever ad set to? 

here confusion: using get-aduser on selected user, return these 4 properties , data:

badlogoncount          : 0
badpasswordtime       : 130231682532108088
badpwdcount             : 0
lastbadpasswordattempt : 9/09/2013 12:44:13 pm

as can see, there bad password attempt on 9th of september, badlogoncount , badpwdcount both 0.

can me understand these properties little or lot better?

thank you!  

im not sure documented exactly. below article explains bad-pwd-count attribute similar 1 talking about.

also can set option no of bad password attempts id locked out in password policy. think option titled "account lockout thereshold"..

http://msdn.microsoft.com/en-us/library/windows/desktop/ms675244(v=vs.85).aspx

hope helps.

---

vijay murugappa ================ if wouldn't forgotten dead, either worth writing, or write worth reading.

Windows Server  >  Directory Services