Changing Password Lockout Policy

I migrated an old 2000 AD to 2008r2. My users accounts get locked out permanently if they put the wrong password in twice, where do I turn this "feature" off??? Remember this was based on 2000.

Thanks!