thanks. just paid another visit to the policy editor.. didnt find exactly what i was looking for (suggestions?) but i did find something that really bugged me.
a while back i set the Account Lockout policy to '5' for all three settings and never got it to work. i would lock the comp and keep entering bogus passwords but it would never do its thing. any ideas as to what i did wrong?