Domain account lockout threshold policy effect on Win11 Cache-cred

testuser7 291 Reputation points
2025-10-03T14:44:57.5333333+00:00

Hello,

I have one basic question.

On a win11 AD-joined or Hybrid-joined device that does NOT have  AD in line-of-sight,   how many times a user can feed the wrong password on the login screen before he is stopped and told that you are locked out ?  Basically is  anti-hammering i.e., brute-force-mitigation possible  against the cached-cred  ??

Thanks.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.