How to Fix ‘The Referenced Account Is Currently Locked Out’ in Windows 11

When attempting to sign in to Windows 11, entering your credentials and receiving the dialogue “The referenced account is currently locked out and may not be logged on to” indicates that Windows Local Security Authority (LSA) has suspended your user account following repeated failed password attempts. This security lockout policy is designed to thwart brute-force password guessing attacks, but it frequently triggers unexpectedly due to background network drives attempting reconnection with stale passwords, cached credentials in Windows Credential Manager, or overly aggressive Account Lockout Thresholds configured in Local Group Policy. Resolving this issue involves unlocking the profile through administrative consoles or waiting out the lockout duration timer.

Understanding Account Lockout Mechanics in Windows 11

The Windows security subsystem enforces account lockouts through three interconnected Local Security Policy parameters: the Account Lockout Threshold (which specifies how many failed attempts trigger a lock), the Account Lockout Duration (the duration in minutes an account remains inaccessible), and the Reset Account Lockout Counter timer. If an automated background service, remote desktop session, or mapped shared folder continuously submits an obsolete password, the counter repeatedly trips, renewing the lockout state indefinitely.

Common triggers of referenced account lockouts include:

• Stale Cached Credentials in Credential Manager: Saved passwords for network printers, NAS storage appliances, or Microsoft accounts repeatedly submitting obsolete credentials. For startup stalls, see our guide on fixing Your PC Did Not Start Correctly in Windows 11.
• Aggressive Group Policy Settings: Enterprise or local security templates enforcing a low lockout threshold (e.g., 3 failed attempts) with extensive lockout durations. For credential verification issues, see our guide on fixing Your Credentials Could Not Be Verified in Windows 11.
• Active Directory Domain Lockout: In workplace environments, domain controllers locking domain user objects when secondary devices (such as smartphones or tablets) attempt Wi-Fi or Exchange synchronization with expired passwords.
• Scheduled Tasks Running Under Outdated User Contexts: Automated scripts running in the background with superseded login tokens.

Security Parameter	Standard Default Value	Operational Impact
Account Lockout Threshold	0 (Disabled by default on Home)	Number of invalid attempts before account lock triggers
Account Lockout Duration	30 Minutes	Period the user is prevented from logging on
Reset Counter After	30 Minutes	Time window during which failed attempts accumulate
Credential Manager Vault	Persistent Storage	Automatically supplies cached tokens across reboots

Method 1: Wait for the Account Lockout Duration Timer to Expire

If your Windows 11 system was configured with standard Microsoft security baselines, the account lockout is temporary rather than permanent.

1. Disconnect your computer from all network connections (unplug Ethernet cables and turn off external Wi-Fi routers) to prevent background services from submitting further bad passwords.
2. Leave the computer powered on at the lock screen without attempting further logins.
3. Wait at least 30 minutes (the standard default lockout duration window).
4. Carefully type your correct password or PIN to sign in successfully.

Method 2: Unlock the Account via Command Prompt Using an Administrative Account

If you have access to a secondary administrator profile on the machine, you can unlock the suspended account immediately using elevated command-line tools.

1. Sign in to Windows 11 using your secondary administrator account.
2. Press Win + S, type cmd, right-click Command Prompt, and select Run as administrator.
3. View the status of the locked account by executing:
   net user [Username]
   (Replace [Username] with the exact username of the affected account).
4. Observe the line reading Account active. If it shows locked, execute the unlock command:
   net user [Username] /active:yes
5. Sign out of the administrator account and immediately log in to your unlocked user profile.

Method 3: Unlock via Local Users and Groups (lusrmgr.msc)

For Windows 11 Pro, Enterprise, and Education editions, the Local Users and Groups management console provides a graphical interface to remove account lockout flags.

1. Press Win + R, type lusrmgr.msc, and press Enter.
2. In the left pane, click the Users folder.
3. In the middle pane, locate and double-click the locked user account to open its Properties dialogue.
4. In the General tab, locate the checkbox labelled Account is locked out.
5. Untick the Account is locked out checkbox.
6. Click Apply and then OK. The account is instantly unlocked and ready for authentication.

Method 4: Flush Outdated Stored Credentials in Credential Manager

To prevent the account from relocking immediately upon connection, clear out outdated authentication tokens saved in Windows Vault.

1. Press Win + S, type Credential Manager, and open the utility.
2. Select Windows Credentials.
3. Scroll through the list under Generic Credentials and Windows Credentials.
4. Look for entries associated with local network shares, printers, NAS devices, or remote desktop hosts.
5. Click the dropdown arrow beside suspect items and click Remove.
6. Restart your computer. When accessing network resources subsequently, enter your current valid password to store fresh tokens.

Method 5: Adjust Account Lockout Threshold in Local Group Policy

Prevent future lockout interruptions on personal workstations by tuning the failure threshold in the Group Policy Editor.

1. Press Win + R, type gpedit.msc, and press Enter.
2. Navigate through the console tree to:
   Computer Configuration > Windows Settings > Security Settings > Account Policies > Account Lockout Policy
3. Double-click Account lockout threshold.
4. Set the value to 0 (zero) to completely disable automatic account locking, or increase the threshold to 10 or 15 attempts to avoid nuisance lockouts.
5. Click Apply and OK, then close the policy editor.