# \[SOLVED\] Lost access to admin account due to reboot

**URL:** <https://forum.inductiveautomation.com/t/solved-lost-access-to-admin-account-due-to-reboot/58937>\
**Category:** Ignition\
**Created:** [April 27, 2022, 4:13pm UTC](https://forum.inductiveautomation.com/t/solved-lost-access-to-admin-account-due-to-reboot/58937 "2022-04-27T16:13:53Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![bmeyers](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/bmeyers/32/37453_2.png) [@bmeyers](https://forum.inductiveautomation.com/u/bmeyers)\
**Post date:** [April 27, 2022, 4:13pm UTC](https://forum.inductiveautomation.com/t/solved-lost-access-to-admin-account-due-to-reboot/58937/1 "2022-04-27T16:13:53Z")

</div>

Good morning,

I was logged into an admin account on Ignition 8.1.12 and an operator rebooted the gateway PC. I then tried logging into the admin account several times which locked out the account (it was rebooting).

Luckily there was a backup admin account we could access but now we can’t login to the primary admin account. We can create new admin accounts and login but if we create an admin account with the original account name (new password) we can’t login to that account.

We have tried a reboot and got nothing.

Is there anything else we can do to recover the original admin account?

---

<div class="post-metadata">

**Author:** ![kcollins](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kcollins/32/19646_2.png) [@kcollins](https://forum.inductiveautomation.com/u/kcollins)\
**Post date:** [April 27, 2022, 4:19pm UTC](https://forum.inductiveautomation.com/t/solved-lost-access-to-admin-account-due-to-reboot/58937/2 "2022-04-27T16:19:52Z")

</div>

The lockout of an account is time-based (default of 15 minutes, see properties here: [Classic Authentication Strategy - Ignition User Manual 8.1 - Ignition Documentation](https://docs.inductiveautomation.com/display/DOC81/Classic+Authentication+Strategy#ClassicAuthenticationStrategy-MainProperties)). You can also re-save a given user source to reset any active lockouts.

---

<div class="post-metadata">

**Author:** ![kcollins](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kcollins/32/19646_2.png) [@kcollins](https://forum.inductiveautomation.com/u/kcollins)\
**Post date:** [April 27, 2022, 4:20pm UTC](https://forum.inductiveautomation.com/t/solved-lost-access-to-admin-account-due-to-reboot/58937/3 "2022-04-27T16:20:55Z")

</div>

Are you getting anything useful in the gateway logs when attempting to login with this account?

---

<div class="post-metadata">

**Author:** ![bmeyers](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/bmeyers/32/37453_2.png) [@bmeyers](https://forum.inductiveautomation.com/u/bmeyers)\
**Post date:** [April 27, 2022, 4:27pm UTC](https://forum.inductiveautomation.com/t/solved-lost-access-to-admin-account-due-to-reboot/58937/4 "2022-04-27T16:27:58Z")

</div>

Give me a minute. Trying this now…

---

<div class="post-metadata">

**Author:** ![bmeyers](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/bmeyers/32/37453_2.png) [@bmeyers](https://forum.inductiveautomation.com/u/bmeyers)\
**Post date:** [April 27, 2022, 4:42pm UTC](https://forum.inductiveautomation.com/t/solved-lost-access-to-admin-account-due-to-reboot/58937/5 "2022-04-27T16:42:41Z")

</div>

So I deleted the user admin, re-added them, tried to login, and it failed. This is the only log message from that event.

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/c/0/c070583f664833b14e4d11ffcdbb4e3c1e39a062.png)

---

<div class="post-metadata">

**Author:** ![kcollins](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kcollins/32/19646_2.png) [@kcollins](https://forum.inductiveautomation.com/u/kcollins)\
**Post date:** [April 27, 2022, 4:45pm UTC](https://forum.inductiveautomation.com/t/solved-lost-access-to-admin-account-due-to-reboot/58937/6 "2022-04-27T16:45:23Z")

</div>

And just to confirm, you’re deleting the user and re-adding to the same user source that is configured as _System User Source_ under _Config → Security → General_?

 ![2022-04-27 at 11.44 AM](https://us1.discourse-cdn.com/inductiveautomation/original/3X/3/1/3196bf80fe618368bd1b27245bfb27745b0ee7a2.png)

---

<div class="post-metadata">

**Author:** ![bmeyers](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/bmeyers/32/37453_2.png) [@bmeyers](https://forum.inductiveautomation.com/u/bmeyers)\
**Post date:** [April 27, 2022, 4:48pm UTC](https://forum.inductiveautomation.com/t/solved-lost-access-to-admin-account-due-to-reboot/58937/7 "2022-04-27T16:48:15Z")

</div>

![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/9/3/930690ec26a02e82fc61b855fb6b9882df541d33.png)

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/a/1/a1404dc743ec8b45868c2169780168ec427503be.png)

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/2/f/2fb8421732350e2ae8d6b67574b753a98942f797.png)

Yes, I am dealing with the default user source of type Internal. I have no problem creating any other admin account and it works fine. The sole problem is the ‘admin’ account.

---

<div class="post-metadata">

**Author:** ![kcollins](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kcollins/32/19646_2.png) [@kcollins](https://forum.inductiveautomation.com/u/kcollins)\
**Post date:** [April 27, 2022, 4:48pm UTC](https://forum.inductiveautomation.com/t/solved-lost-access-to-admin-account-due-to-reboot/58937/8 "2022-04-27T16:48:20Z")

</div>

It looks like based on your screenshot, that profile should be `default`. You might try to go to _Config → Security → User Sources_ and _Edit_ that `default` user source–simply scroll to the bottom and click _Save Changes_ to release any active lockouts. It might be interesting to then monitor the logs (prior to attempting a further login) to see if another lockout occurs. That might be an indication that there is a lingering designer session somewhere attempting to re-authenticate with the wrong credentials and causing a lockout.

---

<div class="post-metadata">

**Author:** ![bmeyers](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/bmeyers/32/37453_2.png) [@bmeyers](https://forum.inductiveautomation.com/u/bmeyers)\
**Post date:** [April 27, 2022, 4:53pm UTC](https://forum.inductiveautomation.com/t/solved-lost-access-to-admin-account-due-to-reboot/58937/9 "2022-04-27T16:53:58Z")

</div>

Another guy here found this thread.

> [@\[FEATURE-1570\] User lockout feature](https://forum.inductiveautomation.com/t/feature-1570-user-lockout-feature/30413/2):
>
> Hi @justin.brzozoski - The only way to immediately clear the lockout is to disable lockout on a user source profile and save. You can then immediately re-enable the lockout and save (if you wish to keep it enabled). This clears all current lockouts for all users for the user source profile.

And it appears we have access again. It is very weird that deleting the user and re-adding them didn't clear the lockout.

---

<div class="post-metadata">

**Author:** ![kcollins](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kcollins/32/19646_2.png) [@kcollins](https://forum.inductiveautomation.com/u/kcollins)\
**Post date:** [April 27, 2022, 5:07pm UTC](https://forum.inductiveautomation.com/t/solved-lost-access-to-admin-account-due-to-reboot/58937/10 "2022-04-27T17:07:31Z")

</div>

Interesting… We’ll take a look at this–our docs certainly suggest that just a simple save is all that is needed to reset the lockouts… I’m glad that you’re going again–sorry for the trouble, and we’ll track some follow-up for this to make sure that the guidance in the docs is well aligned.

---

<div class="post-metadata">

**Author:** ![kcollins](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kcollins/32/19646_2.png) [@kcollins](https://forum.inductiveautomation.com/u/kcollins)\
**Post date:** [April 28, 2022, 9:48pm UTC](https://forum.inductiveautomation.com/t/solved-lost-access-to-admin-account-due-to-reboot/58937/11 "2022-04-28T21:48:59Z")

</div>

Circled back on this, it does look like a simple re-save of the user profile is enough to reset the lockouts (no need to disable and re-enable). This aligns with the current guidance in the docs.

That said, I think it is pretty reasonable to be able to visualize the lockout status of a given user (and reset that specific user’s lockout status). I’ve created an internal feature ticket IGN-5976 to explore such a possibility (or at the very least perhaps make your course of action a reasonable way to clear the lockout for a user on deletion).
