-
Open
secpol.msc
-
Navigate to Account Policies > Account Lockout Policy
-
Set the following:
-
Account lockout threshold: 3
-
Account lockout duration: 15 minutes
-
Reset account lockout counter after: 15 minutes
-
This helps protect against repeated brute-force login attempts.