# Unlock User Accounts

> Remotely unlock macOS User accounts disabled due to failed login attempts using Applivery MDM Commands to restore access.

Source: https://docs.applivery.com/en/device-management/apple/macos/commands/unlock-user-accounts/  •  Last updated: 2026-06-09

**Key topics:** macOS user account lockout, Remote unlocking with Applivery, FileVault considerations, Password policy management, Troubleshooting, macOS, Applivery, FileVault, MDM

---

**TL;DR:** Unlock blocked macOS user accounts remotely using Applivery to restore access and maintain security.

Managing user access issues is an essential part of maintaining smooth operations and security across corporate macOS Devices.

Occasionally, a user account may become blocked after exceeding the allowed number of failed login attempts—typically due to password Policies enforced. When this occurs, users may see the message “Your account has been disabled” after waiting and entering the correct password.

:::warning
Users cannot attempt to enter the password again until the lockout period has fully expired. If the next password entered is incorrect, the lockout duration will increase.

**This lockout cannot be removed using any command or script due to macOS security restrictions**.

However, if the lockout period ends and the next password entered is correct, the user will still receive the “Your account has been disabled” message.
:::

To restore access, you can remotely unlock the affected user account directly from the Applivery Dashboard.

## How to unlock a user account

**Navigate to the target Device**

Once in the [**Applivery Dashboard**](https://dashboard.applivery.io), go to any of your **Devices** 1 and open the **Commands** 2 tab.

**Find the Device**

Click **\+ New command** 3 and select **Unlock User Account** 4

![unlock user account](https://docs.applivery.com/int/_r2/media/09ac0a4e-3ad8-478f-9f15-3474973eec71/7ebcc2c9-ecf8-4daf-905d-4dab286e35d4.png)

The command status should change to **Done** within a few minutes, after which you can notify the user so they can attempt to log in again.

:::info
If the command remains **Pending** or does not change, check the following:

-   The Mac is connected to a valid, managed Wi-Fi network.
    
-   The MDM profile is correctly installed and has the required permissions for user management.
:::

## Special cases: Devices with FileVault enabled

If FileVault is active:

-   The unlock command will not work until the disk is unlocked at login using the user password or the FileVault recovery key.
    
-   If the user cannot unlock the disk, the only solution is to reset the password through [Recovery Mode using the FileVault Recovery Key](https://docs.applivery.com/en/device-management/apple/macos/policies/reset-password/#reset-mac-password-with-filevault-recovery-key).
    

## Recommendations

To maintain efficient and secure account management:

-   Periodically review password Policies and lockout thresholds applied via Applivery.
    
-   Communicate expected wait times and unlock procedures to users to reduce confusion.
    
-   Document each unlock request or support action for proper traceability.
    

By keeping these practices in place and maintaining clear communication with users, you can quickly and proactively resolve account lockouts, reinforcing security and improving the user experience across your macOS fleet.