Ask Different is a question and answer site for power users of Apple hardware and software. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I tried using pwpolicy to set this up. I was able to set up maxFailedLoginAttempts, but setting minutesUntilFailedLoginReset doesn't seem to do anything. When I query pwpolicy using:

 pwpolicy -n /Local/Default -getglobalpolicy

I keep seeing that minutesUntilFailedLoginReset=0 even though I just set it to 60. I even tried changing this for one user, and it claims it was changed but when I query the user's policy or the effective policy nothing has changed.

share|improve this question
Post the commands you’re using to set the pwpolicy please. Thanks. – Martín Marconcini Sep 22 '10 at 13:40

I’m assuming that you’re aware that pwpolicy doesn’t affect Admin accounts (tho it may show you otherwise, leading to believe that it does).

I also asume that you’re running the commands as sudo or at least have tried.

Other than that, I haven’t tried that value myself. As a side (and curious) note the minutesUntilFailedLoginReset is not in the manpage for pwpolicy.

man pwpolicy
share|improve this answer
I used a standard account (not an admin) for my tests. I ran the commands using sudo. It is weird that minutesUntilFailedLoginReset isn't in man. Thanks. – beerncircus Sep 29 '10 at 14:04
I couldn’t find other reference to it in the OS X documentation, I think you might be out of luck. Leave the question open to see if somebody comes in the future with a better idea. Good luck! – Martín Marconcini Sep 30 '10 at 10:03

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.