Working with Windows Accounts and Security Policies

NOTE: Once the lab is ready, please wait 4-5 additional minutes before attempting to remote desktop to the Windows machine. Prior to that, the provided credentials will not work. This is because the Windows machine runs several preparation scripts once it starts.

1. Open the Server Manager.
2. From the Tools menu, select Local Security Policy.
3. Expand Account Policies, and select Password Policy.
4. Configure the following:
   • Maximum password age = 180 days
   • Minimum password age = 3 days
   • Minimum password length = 12 characters

1. Open the Server Manager.
2. Click Tools, and select Local Security Policy.
3. Expand Account Policies, and select Account Lockout Policy.
4. Set the following values:
   • Account lockout threshold = 3 invalid logon attempts
   • Account lockout duration = 10 minutes

Create a temporary user account called contractor1 that will expire one week from today.

1. Open the Command Prompt as Administrator.
2. Run the following commands (remember to replace <MM/DD/YYYY> with the date one week from today):

net user contractor1 Pinehead123abc! /add
net user contractor1 /expires MM/DD/YYYY