2.370 Attribute lockoutDuration

This attribute specifies the amount of time an account is locked due to the Lockout-Threshold being exceeded. This value is stored as a large integer. It represents the negative of the number of 100 nanosecond intervals that elapse, from the time the Lockout-Threshold is exceeded, before the account is unlocked.

 cn: Lockout-Duration
 ldapDisplayName: lockoutDuration
 attributeId: 1.2.840.113556.1.4.60
 attributeSyntax: 2.5.5.16
 omSyntax: 65
 isSingleValued: TRUE
 schemaIdGuid: bf9679a5-0de6-11d0-a285-00aa003049e2
 systemOnly: FALSE
 searchFlags: 0
 attributeSecurityGuid: c7407360-20bf-11d0-a768-00aa006e0529
 systemFlags: FLAG_SCHEMA_BASE_OBJECT
 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

Version-Specific Behavior: First implemented on Windows 2000 Server operating system.

In Windows 2000 Server, rangeUpper is not defined.

The schemaFlagsEx attribute was added to this attribute definition in Windows Server 2008 operating system.