Table of Contents

1. Challenge

   Set password requirements on the local server.

   NOTE: Once the lab is ready, please wait 4-5 additional minutes before attempting to remote desktop to the Windows machine. Prior to that, the provided credentials will not work. This is because the Windows machine runs several preparation scripts once it starts.

   1. Open the Server Manager.
   2. From the Tools menu, select Local Security Policy.
   3. Expand Account Policies, and select Password Policy.
   4. Configure the following:
      • Maximum password age = 180 days
      • Minimum password age = 3 days
      • Minimum password length = 12 characters
2. Challenge

   Configure the account lockout settings.

   1. Open the Server Manager.
   2. Click Tools, and select Local Security Policy.
   3. Expand Account Policies, and select Account Lockout Policy.
   4. Set the following values:
      • Account lockout threshold = 3 invalid logon attempts
      • Account lockout duration = 10 minutes
3. Challenge

   Create a temporary user account.

   Create a temporary user account called contractor1 that will expire one week from today.

   1. Open the Command Prompt as Administrator.
   2. Run the following commands (remember to replace <MM/DD/YYYY> with the date one week from today):

   net user contractor1 Pinehead123abc! /add
   net user contractor1 /expires MM/DD/YYYY