Sign in with Microsoft
Sign in or create an account.
Select a different account.
You have multiple accounts
Choose the account you want to sign in with.


The user accounts are locked out although your expectation is that the account lockout threshold isn't reached yet. Additionally, in the security event log, events are logged.


This issue occurs because the logon attempt for Microsoft Kerberos protocol and Microsoft NTLM protocol operates. This results in two authentication queries against Active Directory. Therefore, the count of incorrect password increases by two instead of by one. 


To fix this issue, install May 2016 update rollup for Windows Server 2012.


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.


Learn about the terminology that Microsoft uses to describe software updates.

More Information

For more information about how to manage account lockout settings and monitoring, see Configuring Account Lockout.

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.

Was this information helpful?

What affected your experience?
By pressing submit, your feedback will be used to improve Microsoft products and services. Your IT admin will be able to collect this data. Privacy Statement.

Thank you for your feedback!