Unlocking an account

Use this topic to unlock a user account.

A user account is automatically locked by the system when the configured threshold for repeated failed login attempts has been reached. The account lockout threshold is a configurable parameter. Refer to Account lockout policy for more information.

Note

The username and no username commands are global configuration commands, but the unlock username command is a privileged EXEC command.

1. In privileged EXEC mode, enter the show users command to display currently active sessions and locked out users.
   

   device# show users
   **USER SESSIONS**
   Username    Role    Host IP       Device    Time Logged In          
   jsmith      user    192.0.2.0     Cli       2016-04-30 01:59:35     
   jdoe        admin   192.0.2.1     Cli       2016-05-30 01:57:41    
   
   **LOCKED USERS**
   testUser
   

2. For each account that you want to unlock, enter the unlock username command.
   

   device#  unlock username testUser
   Result: Unlocking the user account is successful

3. Enter the show users command to verify that the account is unlocked.
   

   device# show users
   **USER SESSIONS**
   Username    Role    Host Ip       Method    Time Logged In          TTY
   jsmith      user    192.0.2.0     cli       2016-04-30 01:59:35     pts/2
   jdoe        admin   192.0.2.1     cli       2016-05-30 01:57:41     tty80
   
   **LOCKED USERS**
   Username
   no locked users