Your network contains a Network Policy Server (NPS) named NPS1. NPS1 is configured for remote
access account lockout. A domain user named User1 has been locked out by NPS1. You need to
unlock the User1 user account on NPS1. What should you use?

A.
the Netsh tool

B.
the Network Policy Server console

C.
the Registry Editor

D.
the Routing and Remote Access console

Explanation:

Manually Unlock a Remote Access Client
If the account is locked out, the user can try to log on again after the lockout timer has run out, or
you can delete the DomainName:UserName value in the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess\Parameters\AccountLo
ckout registry key. To manually unlock an account, follow these steps:
Click Start, click Run, type regedit in the Open box, and then press ENTER.
Locate and then click the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess\Parameters
\AccountLockout
Find the Domain Name:User Name value, and then delete the entry.
Quit Registry Editor.
Test the account to confirm that it is no longer locked out.
http://support.microsoft.com/kb/816118