Question : Group policy: Lockout policy and quota policy question

I would like to know besides setting Lockout policy and quota policy on the "Default Domain policy" object. Where is the appropriate place I should apply the policy? On OU which contains users? Or On OU which contain computers? Or it doesn't matter?

Answer : Group policy: Lockout policy and quota policy question

Lockout policy and quota apply to users. The setting are in the group policy setting.
I usually go from the domain: Start > run > type in: "gpedit.msc"    then enter
Then go to windows setting > security setings  and define the lockout there.
one of the good practices is to allow several tries such as to lock after 10 times and allow it to unlock after 30 minutes or an hour. that is becuase users make mistakes and can be lock out for long time if you make the number of tries to 3 for example or 24 hours to unlock.

hope this helps!