Unlocking Accounts

Role required

Operator or Administrator. Auditors can see locked accounts but cannot unlock them.

Find locked accounts

1. Open the Users page from the left navigation.
2. Use the Status filter (top of the user list) and select Locked to show only locked accounts.
3. Alternatively, search by name or username in the search bar — a padlock icon next to an account means it is locked.

Unlock a single account

1. Click the account row to select it.
2. In the action panel on the right, disengage the safety lock by clicking the lock icon. A confirmation prompt appears — click Unlock safety lock.
3. Click Unlock account.
4. A confirmation dialog shows the account name. Click Confirm.
5. DirWarden writes the lockoutTime = 0 change to Active Directory. The padlock icon disappears and the account status updates to Active.

The action is recorded in the audit log immediately.

Unlock multiple accounts at once

1. Hold Ctrl and click to select multiple accounts (or click one, then Shift+click another to select a range).
2. The action panel shows the count of selected accounts.
3. Disengage the safety lock and click Unlock selected (n accounts).
4. The confirmation dialog lists all accounts. Click Confirm all.

Caution

Bulk unlock is an irreversible batch write. Review the list in the confirmation dialog carefully before confirming.

After unlocking

The user can log in immediately — no replication delay is required if DirWarden is connected directly to the user’s authenticating DC. If you used the domain FQDN in your connection settings, Windows may have routed you to a DC that takes a few seconds to replicate to the user’s site.

If a user reports they are still locked after you confirm the unlock, wait 30 seconds for intra-site replication and ask them to try again.