Error: Your account has time restrictions that prevent you from logging on at this time
Issue description
Users encounter the error message "Access Denied. Your account has login time restrictions. Please try again during your permitted hours or contact your administrator" when logging in to ADSelfService Plus.
Possible causes
- The AD administrator has enforced logon time restrictions for the user.
- The user is trying to log in outside their permitted hours.
Prerequisite
- Administrative access to AD.
Resolution
The AD administrator should:
- Open Active Directory Users and Computers (ADUC) (dsa.msc).
- Locate the affected user account under the appropriate OU.
- Right-click the account and select Properties.
- Navigate to the Account tab.
- Click Logon Hours.
- Ensure that the user has full access by configuring the allowed login hours set to 24x7 or adjust the allowed times accordingly.
- Click OK, then Apply, and OK again.
Validation and confirmation
- Have the affected user attempt to log in to ADSelfService Plus after removing or adjusting the time restrictions.
How to reach support
New to ADSelfService Plus?
Related Articles
How to prevent concurrent logins for a user in ADSelfService Plus
Objective This article details how to restrict users from logging in to ADSelfService Plus from multiple devices or browsers simultaneously. Enabling this restriction strengthens security and helps prevent account misuse or credential compromise ...Copy/Paste Prevention during password Reset
It goes without saying that a password is supposed to remain a secret. Another point to remember is that during an operation like a password reset, passwords tend to be vulnerable. To ensure that password resets happen efficiently and accurately, it ...Troubleshooting the loading freeze error in the ADSelfService Plus login screen when NTLM SSO is enabled
Error When NTLM authentication is enabled, ADSelfService Plus suddenly stops authenticating users and the following error is seen in the serverout file. server.security.NtlmAuthenticator: NTLM authentication error ...Error: Your account has been disabled. Please contact your administrator
Issue description Users encounter the error message "Your account has been disabled. Please see your system administrator" when logging in to ADSelfService Plus. Possible causes The user account might have been disabled manually in Active Directory ...Error: Your account has expired. Please contact your administrator
Issue description Users encounter the error message "Your account has expired. Please contact your administrator" when logging in to ADSelfService Plus. Possible cause The AD user account has expired. Prerequisite Administrative access to AD. ...