If configured in the Local, Domain, or Domain Controller Security Policy MMC Snap-In (depending on which version and what type of net it's on), h3r3tic is correct.

Just remember, if the computer in question in in a Windows Domain, the Domain's security policy overrides the local one, so it would have to be set up on the DC. If it's stand-alone or workgroup, configure it in the local security policy.