A user's account can be blocked in the following conditions:

•If the password expires (expiration time can be a global, group, or user attribute)

•If the user types a wrong password a certain number of times in a row, that is, if a login failure occurs

Once blocked, an account does not allow login. This condition remains until an administrator unblocks the password manually or else the blocking time-out expires.