Microsoft Windows 2000 Domain Account Lockout Vulnerability eliminates a security vulnerability which could allow a malicious user to use repeated attempts to guess an account password even if the domain administrator had set an account lockout policy. The vulnerability could enable a malicious user to conduct a brute force password-guessing attack against a Windows 2000 machine. The attack could only be targeted at the account of a user who had previously logged into the target machine, and whose login credentials were cached on the machine.