How Do I Fix the Error 'user account has been locked because there were too many logon attempts' on Windows 2025?

Table Of Contents:


Overview of the error:

You may receive the following error message when you try to log on to your Windows 2025 server:

Example error message displayed at the Windows login screen:

The referenced account is currently locked out and may not be logged on to.

Or alternatively:

Your account has been locked. Contact your system administrator.

As mentioned in the error message, this is due to too many failed logon attempts or password change attempts.


Before taking any action: If you have not changed your server's lockout duration policy, the account may automatically unlock after 10 minutes. Wait 10 minutes and try logging in again before proceeding with the steps below. 


If the account lockout duration was set to 0 (meaning it never auto-unlocks),  you will need to reinstall Windows 2025 on your server and then disable or edit your server's lockout policy to prevent this from happening again.


Follow these steps to regain access to your server:

  1. Back up your server data. This process will erase all data on the server, so be sure to back up before reinstalling. If you don't have a backup of your data, you can use a rescue system to access your server and create a backup. For information on how to run a rescue system, follow our guide here. 

  2. Re-install your server via the Customer Panel. If you're not sure how to do this, you can follow our guide here. Note: After reinstallation, your new password will not be sent to you by email - make sure to save it somewhere secure before completing the installation.  

  3. Once you have re-installed your server and regained access to it, you can disable or edit your server's lockout policy. To do this, access your server's "Control Center" and locate "Edit Group Policy".

  4. Open "Edit Group Policy" and the following window should open:

    Example view of the Local Group Policy Editor window:

    A window titled Local Group Policy Editor opens. The left-hand panel shows a tree structure with two top-level folders:

    • Computer Configuration
    • User Configuration

    Both folders are collapsed. The right-hand panel is empty at this stage.

  5. Open "Computer Configuration" and you should see the following:

    Expanding Computer Configuration reveals three subfolders:

    • Software Settings
    • Windows Settings
    • Administrative Templates
  6. Open "Windows Settings" and you should see the following:

    Expanding Windows Settings reveals two subfolders:

    • Scripts (Startup/Shutdown)
    • Security Settings
  7. Click "Security Settings" and you should see the following:

    Expanding Security Settings reveals several subfolders, including:

    • Account Policies
    • Local Policies
    • Windows Firewall with Advanced Security
    • Network List Manager Policies
    • Public Key Policies
    • Software Restriction Policies
    • Application Control Policies
    • IP Security Policies on Local Computer
    • Advanced Audit Policy Configuration
  8. Click "Account Policies" and you should see the following:

    Expanding Account Policies reveals two subfolders:

    • Password Policy
    • Account Lockout Policy
  9. Click "Account Lockout Policy" and you should see the following:

    The right-hand panel now displays three policy settings:

    • Account lockout threshold – e.g. currently set to 5 invalid logon attempts
    • Account lockout duration – e.g. currently set to 30 minutes
    • Reset account lockout counter after – e.g. currently set to 30 minutes
  10. Click "Account lockout threshold" and you should see the following:

    A properties dialog box titled Account lockout threshold Properties opens. It contains a numeric input field under the label "Account will lock out after:" followed by "invalid logon attempts". The current value shown is 5. At the bottom of the dialog are three buttons: Apply, OK, and Cancel.

  11. If you want to turn off the lockout function completely you can set the number above to 0, or you can just raise the number of invalid login attempts required to trigger a lockout to be higher.

  12. Once you're done click the "Apply" button and then the "OK" button.

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article

Can't find what you're looking for?