still can't login after switch lockout to active

[tiger2000]

Dear all,

we have two mail servers(ms1 and ms2) and we've enabled the failed-login lockout feature. the detailed setting is :

Number of consecutive failed logins allowed:3
Time to lockout the account: 1 hour
Time windows in which the failed logins must occur to lock the account: 1 hour

question is when user in ms2 is lockout, and admin logins 7071 console to set it back to "active", that user is still not able to login. at the same time, checking the account status by : zmprov ga user@domain , the account status is 'active'.

no idea why?? but user in ms1 doesn't have this issue.

any comment on this??

Thanks.