Active Directory Administration Cookbook

How to do it...

To enable Extranet Smart Account Lock-out for an AD FS farm running SQL Server, run the following lines of PowerShell to update the AD FS Artifact Store:

These three lines of PowerShell do not need to be run on AD FS farms using Windows Internal Database.

$cred = Get-CredentialImport-Module ADFSUpdate-AdfsArtifactDatabasePermission -Credential $cred

To enable Extranet Smart Account Lock-out for an AD FS farm, run the following lines of PowerShell:

Import-Module ADFS

Set-AdfsProperties -ExtranetLockoutThreshold 10

Set-AdfsProperties -ExtranetObservationWindow (New-Timespan -minutes 5)

Set-AdfsProperties -EnableExtranetLockout $true

Set-AdfsProperties -ExtranetLockoutMode AdfsSmartLockoutEnforce

Restart-Service adfssrv