Locked users or credentials are not automatically unlocked after the lockout duration value has been reached.
All users or credentials are not automatically unlocked in bulk when the time elapses. A locked user or credential is automatically unlocked the next time that the user attempts to authenticate if the lock duration set in this policy elapses.
Note: A VIP administrator can manually unlock the user or credential manually, but if this policy is enabled, administrator intervention is not required.