Admin account Reason: Password expired. User Locked out

[Mohammed_Yasin]

PA Firewall local Administrator account is locked out.

ReadOnly Account from which we are able to log in as of now.

The device is standalone & the following service is not available like AD credentials / RADIUS or TACACS. Only local devices.

its any way to do without maintains Mode for reset or recover the password?

[kiwi]

Hi @Mohammed_Yasin ,

I'm afraid not.  The following article also mentions maint mode:

How to Recover Password if User has One Admin Superuser Account 

As a best practice I would definitely change your password policy after you fix this.

Cheers,

-Kiwi.

[Mohammed_Yasin]

Thank you so much for the update,

Due to Firewall location physically isolated where the device is installed, so the physical appearance of device place is not possible as of now.. so looking for alternate option something like.. Login with device Root account and create a New Admin account or something remotely can be achieved.

Simply I mean don't want to go with the Maint Mode Recovery procedure.

[kiwi · Accepted solution]

Hi @Mohammed_Yasin ,

I don't know if that could be a solution to the problem.  

Eitherway, rooting into a device is something only support engineers can do.

So I would recommend contacting them and ask if this is an option.

Cheers,

-Kim.