Solved AllowAdministratorLockout = 1 Security What is this? I wonder what function it is.

secedit /export /cfg cfg.ini
AllowAdministratorLockout = 1

It's on the list of security settings.
Does this setting allow admins?.
Or... is it just a lock function?
It doesn't come up when I search for it.

I don't use admin.
So I want to increase security.


AllowAdministratorLockout = 0
??
Should I zero this?... Or... is it better for security to just leave it at 1?.


(Are you talking about locking the admin?
admin lock.
Do you mean don't allow admins?)

"Lockout" refers to the number of password re-tries a user is permitted after a failed login attempt. You can set "Account Lockout Policy" in Group Policy, if you have Pro edition of Windows. Setting this setting to zero means there is never any lockout.
I am not sure about "AllowAdministratorLockout". I would assume it is related to what I just said.