限制 Windows 10 中失败的登录尝试次数： (Limit the Number of Failed Login Attempts in Windows 10: )如果您在 Windows 10 的锁定屏幕上设置了密码以(Windows 10)防止未经授权的用户访问您的系统，那么您的 PC 仍然可能容易受到攻击者的攻击，因为他们可以使用暴力破解破解你的密码。为防止这种情况发生，Windows 10提供了一种限制 PC 登录尝试失败次数的方法，您还可以设置Account Locket Duration。
引用的帐户当前被锁定，可能无法登录到：(The referenced account is currently locked out and may not be logged on to:)
现在有两种方法可以通过Local Security Policy或Command Prompt自定义上述设置。遗憾的是，Windows 10家庭版用户只能使用命令提示符(Command Prompt)，因为他们没有组策略编辑器(Group Policy Editor)。因此，不要浪费任何时间，让我们看看如何在下面列出的指南的帮助下限制Windows 10中(Windows 10)失败的登录尝试次数(Failed Login Attempts)。(Number)
限制Windows 10中的失败登录尝试(Failed Login Attempts)次数(Number)
确保 创建一个还原点(create a restore point) 以防万一出现问题。
方法一：通过本地安全策略限制登录失败次数(Method 1: Limit the Number of Failed Login Attempts via Local Security Policy)
注意：(Note:)此方法不适用于Windows 10 家庭版用户(Windows 10 Home Edition users)，请继续方法 2。
1.按 Windows 键 + R 然后键入secpol.msc并按Enter打开本地安全策略(Local Security Policy)。
2.导航到以下路径：
Security Settings > Account Policies > Account Lockout Policy
3.确保选择帐户锁定策略(Account Lockout Policy)，然后在右侧窗格中您将看到以下三个策略设置：
帐户锁定持续时间(Account lockout duration)
帐户锁定阈值(Account lockout threshold)
之后重置帐户锁定计数器(Reset account lockout counter after)
4.让我们在继续之前先了解所有三个策略设置：
帐户锁定持续时间：(Account lockout duration:)帐户锁定(Account)持续时间策略设置确定锁定帐户在自动解锁之前保持锁定状态的分钟数。可用范围为 1 到 99,999 分钟。值 0 指定帐户将被锁定，直到管理员显式解锁它。如果Account lockout threshold 设置为大于零的数字，则Account lockout duration 必须大于或等于Reset account lockout counter after 的值。
帐户锁定阈值：(Account lockout threshold:)帐户锁定(Account)阈值策略设置确定将导致用户帐户被锁定的登录尝试失败次数。在您重置它或帐户(Account)锁定持续时间策略设置指定的分钟数到期之前，无法使用锁定的帐户。您可以设置一个介于 1 到 999 次失败登录尝试之间的值，也可以通过将该值设置为 0 来指定永远不会锁定帐户。如果帐户(Account)锁定阈值设置为大于零的数字，帐户(Account)锁定持续时间必须大于或等于重置(Reset)帐户锁定计数器后的值。
Reset account lockout counter after： Reset account(Reset) lockout counter after 策略设置确定从用户登录失败到失败登录尝试计数器重置为 0 之前必须经过的分钟数。如果帐户(Account)锁定阈值设置为大于零的数字，此重置时间必须小于或等于帐户(Account)锁定持续时间的值。
5.现在双击帐户锁定阈值策略( Account lockout threshold policy)并将“帐户不会锁定(Account will not lock out)”的值更改为0到999之间的值，(a value between 0 to 999)然后单击确定。例如，在本例中，我们将此设置设置为 3。
注意：(Note:) 默认(Default)值为 0，表示无论登录失败多少次，帐户都不会被锁定。
6.接下来，您会看到提示“由于帐户(Account)锁定阈值现在是3次无效登录尝试，以下项目的设置将更改为建议值：帐户(Account)锁定持续时间（30分钟）和重置(Reset)帐户锁定（30 分钟后）”。
注意：(Note:)默认设置为 30 分钟。
7.在提示上单击确定，但如果您仍想更改这些设置，请单独双击“帐户锁定持续时间或重置帐户锁定计数器(Account lockout duration or Reset account lockout counter after)”设置。然后相应地更改该值，但请记住必须大于或小于上述指定值的所需数字。
8.关闭所有内容，然后重新启动您的 PC 以保存更改。
这是您 使用组策略编辑器限制 Windows 10 中失败的登录尝试次数的方法，(Limit the Number of Failed Login Attempts in Windows 10 using Group Policy Editor)但如果您使用的是Windows 10 家庭版(Home Edition)，请遵循该方法。
方法二：通过命令提示符限制登录失败次数(Method 2: Limit the Number of Failed Login Attempts via Command Prompt)
1.按Windows Key + X然后选择命令提示符（管理员）。(Command Prompt (Admin).)
2.在 cmd 中键入以下命令并按Enter：
net accounts /lockoutthreshold:Value
注意：(Note:) 将 Value 替换(Replace Value)为 0 到 999 之间的数字，表示在帐户被锁定之前登录尝试失败的次数。默认值为 0，这意味着无论登录尝试失败多少次，该帐户都不会锁定。
net accounts /lockoutwindow:Value
注意：(Note:) 将 Value 替换(Replace Value)为 1 到 99999 之间的数字，表示从用户无法登录到失败登录尝试计数器重置为 0 之前必须经过的分钟数。帐户锁定持续时间必须大于或等于之后重置(Reset)帐户锁定计数器的值。默认值为 30 分钟。
net accounts /lockoutduration:Value
注意：(Note:) 将 Value 替换(Replace Value)为 0（无）到 99999 之间的数字，表示您希望锁定的本地帐户在自动解锁之前保持锁定状态的分钟数。帐户(Account)锁定持续时间必须大于或等于重置(Reset)帐户锁定计数器后的值。默认设置为 30 分钟。将其设置为 0 分钟将指定帐户将被锁定，直到管理员明确解锁它。
3.关闭命令提示符并重新启动 PC 以保存更改。
受到推崇的：(Recommended:)
就是这样，您已成功限制 Windows 10 中失败的登录尝试次数，(Limit the Number of Failed Login Attempts in Windows 10)但如果您对本教程仍有任何疑问，请随时在评论部分提出。
Limit the Number of Failed Login Attempts in Windows 10
Limit the Number of Failed Login Attempts in Windows 10: If you have set a password on the lock screen of Windows 10 to prevent unauthorized users from accessing your system then chances are your PC still might be vulnerable to attackers as they can use brute force to crack your password. To prevent this from happening, Windows 10 provides a way to limit the number of failed login attempts to your PC and you could also set Account Locket Duration.
The referenced account is currently locked out and may not be logged on to:
Now there are two ways via which you could customize the above settings via Local Security Policy or Command Prompt. Sadly, Windows 10 Home users can only use the Command Prompt as they don’t have Group Policy Editor. So without wasting any time let’s see How to Limit the Number of Failed Login Attempts in Windows 10 with the help of the below-listed guide.
Limit the Number of Failed Login Attempts in Windows 10
Make sure to create a restore point just in case something goes wrong.
Method 1: Limit the Number of Failed Login Attempts via Local Security Policy
Note: This method won’t work for Windows 10 Home Edition users, please continue to method 2.
1.Press Windows Key + R then type secpol.msc and hit Enter to open Local Security Policy.
2.Navigate to the following path:
Security Settings > Account Policies > Account Lockout Policy
3.Make sure to select Account Lockout Policy then in the right window pane you would see the following three policy settings:
Account lockout duration
Account lockout threshold
Reset account lockout counter after
4.Let’s first understand all the three policy settings before moving forward:
Account lockout duration: The Account lockout duration policy setting determines the number of minutes that a locked-out account remains locked out before automatically becoming unlocked. The available range is from 1 through 99,999 minutes. A value of 0 specifies that the account will be locked out until an administrator explicitly unlocks it. If Account lockout threshold is set to a number greater than zero, Account lockout duration must be greater than or equal to the value of Reset account lockout counter after.
Account lockout threshold: The Account lockout threshold policy setting determines the number of failed login in attempts that will cause a user account to be locked. A locked account cannot be used until you reset it or until the number of minutes specified by the Account lockout duration policy setting expires. You can set a value from 1 through 999 failed sign-in attempts, or you can specify that the account will never be locked by setting the value to 0. If Account lockout threshold is set to a number greater than zero, Account lockout duration must be greater than or equal to the value of Reset account lockout counter after.
Reset account lockout counter after: The Reset account lockout counter after policy setting determines the number of minutes that must elapse from the time a user fails to log on before the failed logon attempt counter is reset to 0. If Account lockout threshold is set to a number greater than zero, this reset time must be less than or equal to the value of Account lockout duration.
5.Now double-click on Account lockout threshold policy and change the value of “Account will not lock out” to a value between 0 to 999 and click OK. For example, in this case, we will set this setting to 3.
Note: Default value is 0 which means the account will not lock out no matter how many failed login attempts.
6.Next, you will see a prompt saying “Because the value of Account lockout threshold is now 3 invalid logon attempts, the settings for the following items will be changed to the suggested values: Account lockout duration (30 minutes) and Reset account lockout counter after (30 minutes)”.
Note: The default setting is 30 minutes.
7.Click Ok on the prompt, but if you still want to change these settings then individually double-click on “Account lockout duration or Reset account lockout counter after” settings. Then change the value accordingly, but do keep in mind the desired number which must be greater or less than the above-specified value.
8.Close everything then reboot your PC to save changes.
This is how you Limit the Number of Failed Login Attempts in Windows 10 using Group Policy Editor but if you are using Windows 10 Home Edition then follow the method.
Method 2: Limit the Number of Failed Login Attempts via Command Prompt
1.Press Windows Key + X then select Command Prompt (Admin).
2.Type the following command into cmd and hit Enter:
net accounts /lockoutthreshold:Value
Note: Replace Value with a number between 0 and 999 for how many failed login attempts before the accounts is locked. The default value is 0 which means the account will not lock out no matter how many failed login attempts.
net accounts /lockoutwindow:Value
Note: Replace Value with a number between 1 and 99999 for the number of minutes that must elapse from the time a user fails to log on before the failed logon attempt counter is reset to 0. Account lockout duration must be greater than or equal to the value of Reset account lockout counter after. The default value is 30 minutes.
net accounts /lockoutduration:Value
Note: Replace Value with a number between 0 (none) and 99999 for how many minutes you want for a locked-out local account to remain locked out before automatically becoming unlocked. Account lockout duration must be greater than or equal to the value of Reset account lockout counter after. The default setting is 30 minutes. Setting it to 0 minutes will specify that the account will be locked out until an administrator explicitly unlocks it.
3.Close the command prompt and reboot your PC to save changes.
Recommended:
That’s it you have successfully Limit the Number of Failed Login Attempts in Windows 10 but if you still have any questions regarding this tutorial then feel free to ask them in the comment’s section.
