Troubleshooting Tip: Unlocked user accounts are being locked within 24 hours

[preznik_FTNT]

Description

The article describes how to unlock a 'locked out' user who is locked out again during the next password expiration check.

Scope

FortiAuthenticator.

Solution

When an administrator unlocks a 'locked out' user without changing the user's password, the user will be locked out again during the next password expiration check, which runs every 24 hours.

There are two ways to resolve this problem.

Either:

1. Disable 'Enable password expiry' under Authentication -> User Account Policies -> Passwords -> User Password Change Policy.

Or:

2. Be sure to change a user's password after unlocking the user. See the related KB article for details.
   
   

Related article:
Technical Tip: Force password change for local users