Question

Difficulty: MediumWindows Administrative and System Management Tools

An IT technician is configuring a standalone Windows 11 Pro workstation that will be used in a shared office environment. Company compliance guidelines require setting system-wide security rules, specifically enforcing a minimum password length of 14 characters and locking out an account after three consecutive failed logon attempts. Which administrative snap-in should the technician open to configure these password and lockout policies?

  1. Local Security Policy (secpol.msc)Answer
  2. B
    Local Users and Groups (lusrmgr.msc)
  3. C
    Component Services (comexp.msc)
  4. D
    Credential Manager

Answer

Local Security Policy (secpol.msc) is the required administrative utility to set system-wide account password and lockout policies.
Local Security Policy (secpol.msc) is the MMC snap-in used on Windows Professional, Enterprise, and Education editions to manage local security settings, including Account Policies (Password Policy and Account Lockout Policy) and Local Policies (Audit Policy, User Rights Assignment, and Security Options).

Step-by-Step Solution

1
Analyze the technical requirements.
The scenario requires setting system-level security constraints (minimum password length and account lockout threshold) on a standalone Windows machine.
These requirements govern user authentication rules across the local operating system.
2
Identify the proper administrative utility.
Local Security Policy (secpol.msc) contains the Account Policies node, which includes both Password Policy and Account Lockout Policy.
Opening secpol.msc allows the technician to edit settings such as 'Minimum password length' and 'Account lockout threshold'.

Key Concept

Windows Administrative Tools - Local Security Policy (secpol.msc)
Estimated Time:1m 15s
Rate this question