Merge pull request #3876 from MicrosoftDocs/main

Publish main to live, Friday 10:30 AM PST, 09/20
MicrosoftDocs · Sep 20, 2024 · ac58739 · ac58739
2 parents 32307f7 + 8718b39
commit ac58739
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 14 deletions.
diff --git a/docset/winserver2022-ps/activedirectory/New-ADFineGrainedPasswordPolicy.md b/docset/winserver2022-ps/activedirectory/New-ADFineGrainedPasswordPolicy.md
@@ -71,13 +71,6 @@ PS C:\> New-ADFineGrainedPasswordPolicy -Instance $TemplatePSO -Name "AdminsPSO"
 
 This example creates two new fine-grained password policy objects using a template object.
 
-### Example 3: Create a fine-grained password policy with manual account unlock
-```powershell
-PS C:\> New-ADFineGrainedPasswordPolicy -Name "ManualUnlockPSO" -Precedence 500 -ComplexityEnabled $true -Description "Manual Unlock Password Policy" -DisplayName "Manual Unlock PSO" -LockoutDuration "00:00:00" -LockoutObservationWindow "00:00:00" -LockoutThreshold 3
-```
-
-This command creates a fine-grained password policy object named ManualUnlockPSO that would require manual unlock of accounts by the administrator.
-
 ## PARAMETERS
 
 ### -AuthType
@@ -275,6 +268,10 @@ The LDAP display name (**ldapDisplayName**) of this property is **msDS-lockoutOb
 The lockout observation window must be smaller than or equal to the lockout duration for a password policy.
 Use the *LockoutDuration* parameter to set the lockout duration time.
 
+> [!NOTE]
+> Setting the lockout observation window to 0 effectively means that the window is too short to
+> observe more than one password attempt, therefore the account will never be locked out.
+
 Specify the time interval in the following format:
 
 `D:H:M:S.F`

diff --git a/docset/winserver2025-ps/activedirectory/New-ADFineGrainedPasswordPolicy.md b/docset/winserver2025-ps/activedirectory/New-ADFineGrainedPasswordPolicy.md
@@ -71,13 +71,6 @@ PS C:\> New-ADFineGrainedPasswordPolicy -Instance $TemplatePSO -Name "AdminsPSO"
 
 This example creates two new fine-grained password policy objects using a template object.
 
-### Example 3: Create a fine-grained password policy with manual account unlock
-```powershell
-PS C:\> New-ADFineGrainedPasswordPolicy -Name "ManualUnlockPSO" -Precedence 500 -ComplexityEnabled $true -Description "Manual Unlock Password Policy" -DisplayName "Manual Unlock PSO" -LockoutDuration "00:00:00" -LockoutObservationWindow "00:00:00" -LockoutThreshold 3
-```
-
-This command creates a fine-grained password policy object named ManualUnlockPSO that would require manual unlock of accounts by the administrator.
-
 ## PARAMETERS
 
 ### -AuthType
@@ -275,6 +268,10 @@ The LDAP display name (**ldapDisplayName**) of this property is **msDS-lockoutOb
 The lockout observation window must be smaller than or equal to the lockout duration for a password policy.
 Use the *LockoutDuration* parameter to set the lockout duration time.
 
+> [!NOTE]
+> Setting the lockout observation window to 0 effectively means that the window is too short to
+> observe more than one password attempt, therefore the account will never be locked out.
+
 Specify the time interval in the following format:
 
 `D:H:M:S.F`