Direct answer
Review the effective lockout threshold and related duration settings against the account policy, then test with dedicated accounts under an approved plan that includes recovery.
Identify scope and policy
Determine whether the accounts are local or directory-managed, the applicable policy source and the expected threshold, duration and reset interval. Microsoft notes that lockout can slow password guessing but can also be used to deny service to a user.
Reference: Microsoft: Account lockout threshold.
Prepare a controlled test
Use a disposable test account, a maintenance window and an administrator who can restore access. Record the expected result and monitoring process. Do not generate failed sign-ins for real users or shared emergency accounts.
Verify and monitor
Compare the observed test with the effective policy and relevant logs, then confirm the unlock process works. Investigate repeated lockouts for stale credentials, automated services or attempted abuse. Tune settings through the policy owner, balancing user recovery with security objectives.
Recover a service account safely
A scheduled job with an old password can repeatedly lock its account after a credential rotation. Identify the owner and job, update the credential through the approved secret-management process and verify successful operation. Keep a record of the incident without exposing the password, and investigate other failed sources before declaring the problem resolved.
Assessment limits
Lockout does not stop all attacks and may affect availability. Domain, local and cloud authentication systems can use different policies and protections.
Frequently asked questions
Does a lockout threshold eliminate password attacks?
No. It is one control and can itself be abused to lock out users.
Should a real user account be used for testing?
Use an approved dedicated test account and a documented recovery path.
Why review duration as well as threshold?
The combined settings determine when an account locks and how it is restored.
Primary sources and further reading
These guides combine published security guidance with practical assessment planning. Adapt checks to the owner's policy, environment, and authorized scope.
This guide was prepared with AI assistance using the linked sources and illustrative examples. Check current vendor guidance and your environment before making changes.