Cisco ISE admin account locked out

[MMstre]

Nearly everytime i log into ISE, i get an error stating the account has been locked out. In order to get in, i have to do a password reset.

I cannot figure out why the account continues to get locked out.  No one is accessing it, and the logs show nothing.

Has anyone seen this?

[SCOTT VOLL]

Go into your User Password Policy (under Administration --> Identity Management).

I'm guessing the default "disable user account after XX days if password is not changed" is still selected.

Had the same issue when we first started using ISE.

=)

Scott

[MMstre]

I checked this and still no go. I even disabled it.

On my lab kit, it never happens, only on those that are in production.

[hslai]

Depending on ISE releases. For ISE 2.1+, check out

• Configure a Password Policy for Administrator Accounts
• Configure Account Disable Policy for Administrator Accounts
• Configure Lock or Suspend Settings for Administrator Accounts

If none helps, please engage Cisco TAC.