The error message “The specified account is currently locked and may not be logged in” usually appears on domain computers where a user has entered their password incorrectly several times and has been locked out of the domain.
To easily solve the “Account given account is locked” issue, please wait at least 30 minutes before trying to re-enter your password, or continue reading below to see all available solutions.
How to fix the error “The given account is currently blocked and may not be logged in.” on Windows.
Method 1. Wait 30 minutes to unlock the account.
As mentioned at the beginning of the article, the easiest way to solve the “account is currently locked” problem is to wait 30 minutes and then try to log in again by entering the correct password.
*Note: “30 minutes” is the default account lockout period before the account is automatically unlocked (unless otherwise specified).
Method 2. Unlock account A using a local administrator account.
If the computer not joined to the domain (otherwise go to the next method), proceed as follows:
1. Enable the local administrator account offline by following the instructions in this guide.
2. Introduction to the workstation using local administrator account.
3. It’s open the Local Security Policy editor. (secpol.msc)
4. go to Security settings > Profile settings > Account Lockout Policy
5. open the Account blocking limit policy, configure it 0 (zero) and press OK.
6. Restart the computer and log in to the blocked account.
Method 3. Unlock the linked account on the domain controller.
On AD domain computers and for security reasons, the default domain policy can prevent any user from accessing the domain if the password is repeatedly entered incorrectly. So, if the computer is joined to a domain, go ahead and unlock the account referenced in the Domain Controller:
1. On the domain server: Active Directory Users and Computers -> Users
2. Right click in the locked user and select Characteristics.
3. Yes Account check the label Unlock account check box and click OK.
Method 4. Disable or change the account blocking policy.
Follow these steps to remove or change the account lockout policy on your server or Windows computer:
1. In your domain controller, open Server Manager and then from Tools open the menu Manage Group Policy. *
*Note: For standalone servers or workstations, open the Local Group Policy Editor (gpedit.msc)
2. In the Group Policy Management Editor, right click at Default domain policy and select Editing. *
Note: For standalone servers or workstations, go to the next step.
3. Go to Group Policy Editor:
4. open the Account blocking limit politics.
5. Features in account blocking limituse one of the following depending on your preference:
a. Remove the mark the Define this policy setting check box and click ok if you want to prevent accounts from being locked out after entering the wrong password or…
b. Increase the number of invalid login attempts and click OK.
6. press OK again in “Recommended value changes”.
7. Close the Group Policy Editor.
8. Finally, open it Command line as administrator and issue the following command to update the group policy or restart Computer.
That’s it! Let me know if this guide helped you by leaving a comment about your experience. Please like and share this guide to help others.