SBS 2003 lockout policy

Hi

Our SBS 2003 server is under sustained hack attack from various parts of the world. They are trying to brute force RDP and RWW.

I've changed the default admin usernames and the user's usernames to non-standard formats and implemented stronger passwords. However I'd really like to be able to enable account lockout after say 3 bad attempts. I simply cannot get this to work. The usual SBS 2003 Account Lockout Policy doesn't exist for some reason but I've tried creating one myself and also tried setting the policy in the default domain policy, domain controllers policy and other places. But it doesn't work.

I'd really appreciate some help troubleshooting why this doesn't work for me.

Thanks

N