Unlimited Login attempts by default on Active Directory?

On all the Linux servers I manage there are by default timeouts for bad behaviour.

In a nutshell, when a hacker tries and fails to login a few times their ip gets blocked for five minutes or more.

Is this impossible on Microsoft? Or is it off by default?

active directory bad blocked cybersecurity default directory hacker linux linux servers login login attempts manage microsoft servers