- Newest
- Most votes
- Most comments
The error message indicates that the user account has been locked due to too many failed login attempts or password changes. This is a security precaution to prevent unauthorized access. Considering below on how to address and fix:
-
Reset the Password If you suspect the password is incorrect or compromised, reset the password for the locked account. You can do this through the AWS Management Console or by using the Systems Manager Session Manager to access the instance.
-
Check Security Group and Network ACLs Ensure that the security group and network ACLs associated with the EC2 instance allow Remote Desktop Protocol (RDP) traffic (port 3389) from your IP address.
-
Use the EC2 Serial Console If you cannot connect via RDP, use the EC2 Serial Console to access the instance and unlock the account. This feature allows you to troubleshoot and fix issues without needing network connectivity.
-
Enable Account Lockout Policy If this issue occurs frequently, consider reviewing and adjusting the account lockout policy on the instance. You can do this through the Group Policy Editor or by modifying the registry.
-
Check for Brute Force Attacks If you did not make multiple login attempts, the account lockout might be due to a brute force attack. To mitigate this:
-
Disable RDP access temporarily.
-
Change the username and password to something more complex.
-
Enable multi-factor authentication (MFA) for added security.
Relevant content
- asked a year ago
- asked 3 months ago
- AWS OFFICIALUpdated 3 years ago
- AWS OFFICIALUpdated 4 years ago
- AWS OFFICIALUpdated 2 months ago