---
title: How Do I Unlock a User that is Locked Out?
canonical: https://openvpn.net/as-docs/faq-unlock-users-that-are-locked-out/
product: Access Server Docs
---

# How Do I Unlock a User that is Locked Out?

**Question:** How do I unlock a user that's locked out?

**Answer:**

To reset lockouts, briefly change the expiration timeout and revert the settings. Follow the steps for either the Admin Web UI or CLI:

## Manually unlock a locked-out user account

If you wish to unlock a locked-out user manually, follow the steps below.

> **Tip**
>
> You can't unlock a single, specific user. The steps below allow you to set the automatic lockout reset period to one second and then revert it back to the default value.

### Manually unlock a user from the Admin Web UI

Access Server 2.10.2 and newer configures the lockout policy in the Admin Web UI. To manually unlock users, follow these steps:

1. Sign in to the Admin Web UI.
2. Click **Authentication \> Settings**.
3. Under **Password Lockout Policy**, take note of your current value for the **Lockout release timeout in seconds**.
4. Set the value to **1**.
5. Select **Save Settings** and **Update Running Server**.
6. Wait two seconds.
7. Set the value back to your initial value.

   > **Tip**
   >
   > Access Server's default lockout is set to 900 seconds, or 15 minutes.
8. Select **Save Settings** and **Update Running Server**.
   - The locked-out user can sign in again.

### Manually unlock a user from the CLI

1. Connect to your Access Server console and get root privileges.
2. Change your directory to use the **sacli** tool.

   ```
   cd /usr/local/openvpn_as/scripts/
   ```
3. Run these commands to set the lockout to one second, wait two seconds, and then set it back to the default value of 15 minutes. (If desired, modify the command for your preferred lockout time.)

   ```
   ./sacli --key "vpn.server.lockout_policy.reset_time" --value "1" ConfigPut
   ./sacli start
   sleep 2
   ./sacli --key "vpn.server.lockout_policy.reset_time" --value "900" ConfigPut
   ./sacli start
   ```
4. The locked-out user can sign in again.

---

Prev: [What Are SSL Certificates in Access Server?](https://openvpn.net/as-docs/faq-ssl-web-certificates.md)
Next: [Authentication](https://openvpn.net/as-docs/faq-authentication.md)
Index: https://openvpn.net/as-docs/llms.txt