When an account is locked, an administrator can manually unlock it using the following command structure:

While knowing how to use ipa user-unlock is essential, minimizing its necessity will improve operational efficiency:

Assume user bjensen is locked. Run:

If a user is locked out frequently, check the password policy in the FreeIPA UI to ensure it is not too restrictive.