macOS Unlock User Account action shows Success but user is still locked out after wrong password attemptsSolved

Hi @nevaeh,

The Unlock User Account action may not clear every type of macOS login lockout.

If the account was locked because of multiple incorrect password attempts, macOS can treat it as a local security event, similar to brute-force protection. In that state, the OS may enforce its own lockout to protect local data, including the user keychain and encrypted data. The MDM command can still be received and reported as successful, but macOS may continue to prevent the user from logging in until the local security condition is cleared.

This is different from an administrative or MDM-managed account restriction, where the remote unlock action is more likely to take effect as expected.

Regards,
Sienna Carter
Hexnode UEM

That makes sense. If the remote unlock doesn’t work in this situation, is there another way to get the user back in without waiting for them to remember the password?

Hi @nevaeh,

For a macOS account locked due to repeated failed password attempts, the practical recovery options are:

1. Reset or change the local account password, if another administrator account is available on the Mac.
2. Use the FileVault recovery key to reset the password, if FileVault is enabled and the recovery key is available.
3. Boot the Mac into recovery mode and reset the password using the FileVault recovery key or available macOS recovery options.

If the locked user is the only administrator account on the device, changing the password remotely may not work as expected. In that case, using the FileVault recovery key through macOS recovery is the recommended recovery path.

Regards,
Sienna Carter
Hexnode UEM

We had a similar case where the only admin account was the one that got locked. The remote action showed as completed, but the Mac still blocked login. The FileVault recovery key was the only usable way to reset the password.

Got it. We’ll keep the FileVault recovery key available for these cases.