By design, the built-in Administrator account is exempt from the Account Lockout Policy. This ensures that critical administrative access is always available, even in cases of brute force or accidental lockout attempts. The logic: If this account were locked and no other Domain Admin account exists, it could prevent recovery during emergencies.
C:\htb> net use \\DC01\ipc$ "" /u:""
The command completed successfully.
C:\htb> net accounts
Force user logoff how long after time expires?: Never
Minimum password age (days): 1
Maximum password age (days): Unlimited
Minimum password length: 8
Length of password history maintained: 24
Lockout threshold: 5
Lockout duration (minutes): 30
Lockout observation window (minutes): 30
Computer role: SERVER
The command completed successfully.
