Robot Execution Fails From Orchestrator With Error "Account restrictions prevent this user from signing in"

News Knowledge Base
1

How to resolve when the Robot Execution fails from Orchestrator with Error "Account restrictions prevent this user from signing in" immediately ?

Issue Description:
The error message ‘Account restrictions are preventing this user from signing in’ is thrown when an Orchestrator is unable to establish a Remote Desktop connection to a target system, i.e. the Robot machine.

This error can be caused by the Windows Group Policy which stops it from passing credentials to the remote system.


Resolution:

  1. Login to the impacted machine using "Microsoft Remote Desktop Connection".
  2. See if a prompt to Reset the Account Password or Account is being Locked out is visible and take suitable actions accordingly.

Steps to be performed:

  1. Login to the Unattended Robot machine with the credential which is configured in the Orchestrator, renew the password if the message " Password has expired, please renew it." is obtained
  2. If no message is received, run Net accounts command to check the password policy for the Users
  3. Run the command net user Administrator | find /i "Password last set" to check the last password change time for the Unattended Robot User account(local account) if it is longer than the Maximum password age (days). If yes, change the password for the User.

  1. If it is a domain account, use PasswordLastSet properties to check the password last change time

1 Like