Get the length of time for which a user account is locked out after the user makes too many bad password-answer attempts.
Documentation for this section has not yet been entered.
When the ActiveDirectoryMembershipProvider.EnablePasswordReset property is true, the user must answer the password question to reset his or her password. If the user fails to supply the correct answer a consecutive number of times equal to the ActiveDirectoryMembershipProvider.MaxInvalidPasswordAttempts property value within the observation time period specified by the ActiveDirectoryMembershipProvider.PasswordAttemptWindow property, the user is locked out of further attempts for the number of minutes contained in the ActiveDirectoryMembershipProvider.PasswordAnswerAttemptLockoutDuration property.
This property does not set the duration a user is locked out after failing to enter a valid password. The Active Directory server handles failed logon attempts and is not affected by the value of this property. We recommend that the ActiveDirectoryMembershipProvider.PasswordAnswerAttemptLockoutDuration property be set to the same value as the account lockout duration specified for too many failed logon attempts in the Active Directory configuration. This will present consistent auto-lockout behavior for users regardless of whether they were locked out due to failed logon attempts or to bad password answers.
The ActiveDirectoryMembershipProvider.PasswordAnswerAttemptLockoutDuration property is set in your application's configuration file using the passwordAnswerAttemptLockoutDuration attribute of the membership element. If the property is not set in the application's configuration file, the ActiveDirectoryMembershipProvider.PasswordAnswerAttemptLockoutDuration property is set to the default value of 30 minutes.