Hi,
    Today we have a global account lockout policy in 389 which is applied to a specific instance.

With many countries applying different compliance rules for securing personal data of their cititizen we see an increasing demand to have a seperate account lockout policy for special types of accounts or to be applied on a Country specific OU.

Example. If we want to have the accountlockoutduration set to 60 minutes for a specific OU instead of the standard duration applied on a global policy , can it be done?
I can see we can apply different password policies but that doesnt cover the account Lockout policies.

Any help would be appreciated.