diff --git a/ansible/roles/win_domain_controller/files/OpenStackADBuildv7.5.3.ps1 b/ansible/roles/win_domain_controller/files/OpenStackADBuildv7.5.3.ps1
index 02fb303..d60ecda 100644
--- a/ansible/roles/win_domain_controller/files/OpenStackADBuildv7.5.3.ps1
+++ b/ansible/roles/win_domain_controller/files/OpenStackADBuildv7.5.3.ps1
@@ -207,7 +207,7 @@ Set-GPRegistryValue -Name "Default Domain Policy" -ValueName "ConsentPromptBehav
 #enable-folderredirection -AllFolder
 
 #Domain Password Policy
-Set-ADDefaultDomainPasswordPolicy -identity $DomainID -MaxPasswordAge "42" -MinPasswordAge "1" -MinPasswordLength "12" -PasswordHistoryCount "24" -ComplexityEnabled $true -ReversibleEncryptionEnabled $false -LockoutThreshold "0"
+Set-ADDefaultDomainPasswordPolicy -identity $DomainID -MaxPasswordAge "42" -MinPasswordAge "1" -MinPasswordLength "12" -PasswordHistoryCount "24" -ComplexityEnabled $true -ReversibleEncryptionEnabled $false -LockoutThreshold "5"
 Get-LocalUser Guest | Disable-LocalUser
 #Get-localuser Administrator | Disable-LocalUser