What setting is used to lock an account after a specified number of incorrect logon attempts?

The setting used to lock an account after a specified number of incorrect logon attempts is known as "account lockout." This security feature is designed to protect against unauthorized access by preventing repeated unsuccessful login attempts. When a user enters incorrect credentials multiple times, the system will lock that account for a designated period or until it is reset by an administrator.

Implementing an account lockout policy is essential for defending against brute force attacks, where an attacker attempts to guess the password by trying many different combinations. By automatically locking an account after a certain threshold of failed attempts, the risk of unauthorized access is significantly reduced.

Other settings mentioned, such as password history, minimum password age, and maximum password age, relate to how passwords are managed and changed, but they do not influence the lockout behavior of accounts in response to incorrect login attempts. Password history helps prevent users from reusing old passwords, while minimum and maximum password ages dictate how long a password must be used before it can be changed or how frequently it must be changed. These settings contribute to overall security but do not specifically control account lockout conditions.