When a machine is locked out, none of the "Registered Users" will be able to use the Symantec Endpoint Encryption Login screen. However, the Symantec Endpoint Encryption Client Admin is never locked out of the machine.
Using the Symantec Endpoint Encryption Client Admin to log into the machine the machine can be unlocked.
- The Symantec Endpoint Encryption Client Admin opens the Client Console
- Click on the check-in link
- Press the Extend Due Date button that is displayed. Clicking that button will reset the User access to the machine based upon the policy for check-in.