بسم الله والحمد لله والصلاة والسلام علي رسول الله وآله وصحبه وإخوانه وسلم
Error code: 0x20e7
I was trying to create an object to apply a fine grained password policy, which allows us to make a different password policy for some users. but i came up with the following error:
I have set the msDS-LockoutObservationWindow to 00:00:30:00 and the msDS-LockoutDuration value to 00:00:02:00.
•
msDS-LockoutObservationWindow. This attribute is a negative number that
indicates the number of milliseconds that must pass before the counter for
failed logon attempts should be reset. It should be entered in the form of:
•
msDS-LockoutDuration. This attribute is a negative number expressed in
milliseconds that indicates how long an account will remain locked out. A value
of "0" indicates that the account will stay locked out until it is
manually unlocked by an administrator.
the problem was that: The “msDS-LockoutObservationWindow” should not be longer than the “msDS LockoutDuration”.
so to get out of this, i have set the tow values to 00:00:02:00, and it worked,thanks to Allah.
I hope that has been informative to you.
ولا تنسوني والمسلمين من صالح الدعاء
وصلي الله وسلم وبارك علي النبي وآله وصحبه وإخوانه وسلم
