account lockout

[msteder]

I have a domain account that runs as a IIS anonymous on about 50 machines. Last time I changed the password for this account, I used a script to change it in IIS on my 50 machines. I found that there was a 51st machine that was using this account, once the password changed, this machine failed 5 times and locked this account out causing IIS to fail on 50 machines. My understanding of GPO is that the Default Domain Policy controls lockouts and if you set it to zero in another OUs GPO it doesn't get used. This is what I've done and it still locks the account out after 5 times. Is there a way to set lockout per user or at a level that overrides Default Domain Policy?

 

[basst]

I think you need to solve the issue as to why the account is being locked out. If you really want an easy solution then just run the service with your domain admin account. This account cannot be locked out!