Use the login authentication lockout command to lock out or disable a local user account after successive failed login attempts. When an account is disabled, the administrator must re-enable the account. Use the no form of the command to return the lockout or disable threshold counts to their default values.
When you run the login authentication lockout command, the new lockout settings immediately override previous settings for all user accounts.
Note:
You can only lock a root account, but not disable it.
