disable account on invalid login

Giganews Newsgroups
Subject: disable account on invalid login
Posted by:  David (Dav…@discussions.microsoft.com)
Date: Tue, 28 Apr 2009

I have a windows 2003 server sp1 being used as a domain controller.

Under the Default DC Security Settings/Account Policies/Account lockout policy

I have 'account lockout threshold' set to 3 invalid login attempts
and 'account lockout duration' is 30 min.

Yet when there are 3 invalid attemtps the account is not disabled.

Is there another setting somewhere that need attenion for the account
to be disabled on invalid login attemps.