How to unlock a Windows user account after too many failed RDP login attempts

  • Support
  • General
  • How to unlock a Windows user account after too many failed RDP login attempts
Estimated reading time: 3 min

Introduction

Some users may encounter issues when connecting to a Windows server through Remote Desktop (RDP), receiving an error similar to:

As a security precaution, the user account has been locked because there were too many logon attempts or password change attempts. Wait a while before trying again, or contact your system administrator or technical support.

This message indicates that the Windows user account has been temporarily locked due to multiple unsuccessful login or password attempts.

The account can be unlocked by accessing the server through the server console.

Cause

This issue occurs when Windows detects multiple unsuccessful authentication attempts for the user account.

Common causes include:

  • Multiple incorrect RDP login attempts.
  • An incorrect or outdated password being used.
  • Saved RDP credentials containing an old password.
  • A service or scheduled task using an outdated password.
  • Another device or application repeatedly attempting to authenticate with the affected account.

Windows locks the account as a security precaution to help protect it against repeated unauthorized login attempts.

Solution

1. Access the Server Console

If RDP access is unavailable, you can access the server directly through the console.

  1. Log in to the Snel Client Area.
  2. Open the relevant server.
  3. Click Console to access the server.
  4. Log in using an administrator account.

2. Unlock the User Account

Once logged in through the console:

  1. Press Windows + R.
  2. Enter:

    compmgmt.msc

  3. Click OK.
  4. Navigate to:

    Computer Management → Local Users and Groups → Users

  5. Locate the affected user account.
  6. Right-click the account and select Properties.
  7. If the account is locked, clear the Account is locked out option.
  8. Click Apply and then OK.

After unlocking the account, try connecting to the server again using RDP.

3. Reset the Password if Required

If the user is unsure whether the correct password is being used, the administrator can reset the password from the user’s Properties menu.

After changing the password, make sure the new password is used when connecting through RDP.

Prevent the Account from Being Locked Again

If the account becomes locked again after being unlocked, we recommend checking the following:

1. Create an Additional Administrative User

The built-in Administrator account is commonly targeted by automated brute-force attacks. We recommend creating a separate administrative user with a different username and using it for administrative RDP access.

For detailed instructions, see:

How to Create an Additional Administrative User on a Windows Server

2. Restrict Access to RDP

We recommend restricting access to the RDP service to trusted IP addresses or networks to reduce exposure to automated brute-force attacks.

RDP access can be restricted using Windows Defender Firewall with Advanced Security within the Windows operating system.

  1. Log in to the Windows server using an administrator account.
  2. Open Windows Defender Firewall with Advanced Security:
    • Press Windows + R.
    • Enter wf.msc.
    • Click OK.
  3. In the left panel, select Inbound Rules.
  4. Locate the rules named Remote Desktop – User Mode (TCP-In).
  5. Right-click the applicable rule and select Properties.
  6. Open the Scope tab.
  7. Under Remote IP address, select These IP addresses.
  8. Add the trusted public IP address(es) or network(s) that should be allowed to connect to RDP.
  9. Click Apply and OK.
  10. Repeat the configuration for the relevant Remote Desktop – User Mode (UDP-In) rule if UDP access is required.

Important: Make sure your current public IP address is included in the allowed IP addresses before applying the restriction. Otherwise, you may lose RDP access to the server.

For VPS servers, you can also configure firewall rules through the Snel Client Area using the Cloud VPS Firewall.

For more information, see:

Cloud VPS Firewall Configuration

3. Check for Repeated Failed Login Attempts

If the account continues to become locked, check for:

  • Saved or outdated RDP credentials.
  • Services or scheduled tasks using an old password.
  • Other devices or applications attempting to log in with incorrect credentials.
  • Failed login attempts in Event Viewer → Windows Logs → Security.

These checks can help identify the source of the repeated account lockouts.

Conclusion

The RDP error occurs because Windows has locked the user account after multiple unsuccessful authentication attempts.

When RDP access is unavailable, the server console can be used to access the Windows server and unlock the affected account. If the account becomes locked again, investigate other devices, services, scheduled tasks, or saved credentials that may be using an incorrect password.

Was this article helpful?
Dislike 0
Views: 20

Reader Interactions

Leave a Reply

Your email address will not be published. Required fields are marked *