I recently hired a VPS with Windows Server 2016, and since I'm getting like 4-5 login attempts per minute to access it, I decided to create an account lockout policy:
- Account lockout duration: 0
- Account local threshold: 5 attemtps
- Reset account local threshold after: 99.999
Nonetheless, those login attempts, specifying the same user, haven't stop. I even tried it myself. The used accounts are not being locked (looking at Users and Local Groups). Am I missing something?