Standard User Lockout Duration: registry value StandardUserAuthorizationFailureDurationComputerHKLM\Software\Policies\Microsoft\TPM
- Policy ID
- StandardUserAuthorizationFailureDuration_Name
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2012, Windows 8 or Windows RT
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- System › Trusted Platform Module Services
Registry
StandardUserAuthorizationFailureDuration
-ComputerHKLM\Software\Policies\Microsoft\Tpm Current key
StandardUserAuthorizationFailureDuration
REG_DWORDComputerHKLM\Software\Policies\Microsoft\Tpm Current key
- Enabled value
- Depends on the option value
- Element
- Duration for counting TPM authorization failures (minutes):
- Value type
- REG_DWORD
- Maximum value
- 10000
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Tpm] ; Value names and types follow the ADMX. Replace <enter value> below with your own data "StandardUserAuthorizationFailureDuration"=dword:<enter value>
CMD
:: Value names and types follow the ADMX. Replace <enter value> below with your own data reg add "HKLM\Software\Policies\Microsoft\Tpm" /v "StandardUserAuthorizationFailureDuration" /t REG_DWORD /d "<enter value>" /f
PowerShell
# Value names and types follow the ADMX. Replace <enter value> below with your own data New-Item -Path 'HKLM:\Software\Policies\Microsoft\Tpm' -Force | Out-Null New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Tpm' -Name 'StandardUserAuthorizationFailureDuration' -PropertyType DWord -Value '<enter value>' -Force | Out-Null