diff --git a/defaults/main.yml b/defaults/main.yml
index 248b492..608b3c7 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -582,10 +582,8 @@ rhel9cis_pam_password:
     minclass: 4
 
 rhel9cis_pam_faillock:
-    attempts: 5
     unlock_time: 900
-    fail_for_root: no
-    remember: 5
+    deny: 5
 
 # UID settings for interactive users
 # These are discovered via logins.def if set true