HOW TO: Unlock a User Account on the Target System After a Real-time Password Reset (4378230)

When performing a password reset using a real-time password sync in the Active Roles Synchronization Service, the target Active Directory user account will remain locked even after the reset. This is expected functionality.

If desired, the Active Directory User account can be unlocked at the same time that the password is updated.

In the Active Roles Synchronization Service Console:

1. Verify Sync Services Capture Agent Installation:
   Ensure that the Active Roles Synchronization Services Capture Agent is installed on all source Active Directory Domain Controllers where password resets are performed. This ensures the changes are captured and propagated correctly to the target Domain Controller by the Active Roles Synchronization Service.

2. Open the desired Password Sync Rule
   

3. Configure a Forward Rule Sync:

   • Navigate to the Forward Rule Sync section.
   • For the Source, select Text from the drop-down menu and enter the value 0.
   • For the Target, select the user attribute "LockOutTime" from the drop-down menu.

The target Active Directory User account will now be unlocked whenever a password is updated.