I have a CLI user locked... how unlock it?

[Daniel RLL]

On a Cisco ISE v 2.6.0.156, I have a CLI user locked due to failure attemps.

My password policy is:

password-policy
lower-case-required
upper-case-required
digit-required
no-username
no-previous-password
min-password-length 4
password-lock-enabled
password-lock-timeout 15
password-lock-retry-count 3

So I thought that after 15 minutes the user account should be unlocked, but it keeps locked.

Two questions: 

1. Does the "password-lock-timeout" command release the "locked" status after the configured minutes?
2. How can I unlock a CLI user locked before that timeout?

Thanks

[balaji.bandi]

is this admin user  then follow below guide :

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/200568-ISE-Password-Recovery-Mechanisms.html