A Valid Access Card Is Denied: Check Door Groups, Schedules, and Synchronization

Valid is not one system state

A valid access card denied by a schedule or door rule does not necessarily indicate a failed reader. Verify the intended authorization chain, clock, controller synchronization, and recorded denial reason while preserving the property’s approved access limits.

A Reddit locksmith reported an intermittent Kantech-controlled door that tested normally but failed around a lunchtime schedule change. The author suspected programming, while later discussion left mechanical causes unresolved. The account supports collecting the timestamp and actual denial or grant event; it does not prove that a schedule was the cause.

Start with the recorded denial reason and timestamp. Compare the same authorized credential at a working opening only under the property’s approved test plan. Do not broaden someone’s permissions merely to make troubleshooting easier.

Source: Locksmith reports scheduled lunchtime release failure with uncertain cause

Check the permission chain

Review credential status, person, access group, included door, schedule and expiration against the actual event. If the system logged a grant but the door stayed locked, use the physical-release guide instead. A schedule is only one possible authorization condition.

Axis access-management documentation distinguishes users, groups, doors, and schedules. The exact implementation varies by system, but the diagnostic principle remains: check the entire authorization chain and preserve least-necessary access during testing.

Source: AXIS A1001 and AXIS Entry Manager

Distinguish format, time and anti-passback failures

Axis documents card-format bit lengths and field maps, including facility code and card number. A matching printed number is not enough if the reader and controller interpret different formats or fields. Compare the received credential with its documented format; do not create broad raw-card permissions to conceal a parsing mismatch.

Also check controller time, time zone and daylight-saving configuration. Axis provides separate settings for those items and its time source. A correct-looking weekday schedule evaluated against the wrong local clock can produce the wrong result. Confirm the required identification mode, such as card alone versus card plus PIN, for the attempted time.

Anti-passback tracks entry and exit sequences to discourage sharing a credential. Verkada distinguishes soft mode, which reports a violation, from hard mode, which denies subsequent credential access until the violation is reviewed and cleared. A missing prior exit transaction can therefore matter even for an enrolled card. Preserve required egress and follow the authorized review procedure rather than disabling the policy to make the test pass.

Source: AXIS A1001 and AXIS Entry Manager · Verkada US: Soft and Hard Anti-Passback

Illustrative scenario: weekend staff cannot enter

Imagine an employee’s badge works Monday through Friday but fails for an approved Saturday shift. The badge and reader may be functioning correctly while the assigned schedule excludes Saturday. Duplicating the credential or replacing hardware does not address the intended access policy.

The authorized administrator should correct the appropriate schedule or temporary permission, then verify the change at the actual door. Review expiration so a one-time exception does not silently become permanent access.

Source: AXIS A1001 and AXIS Entry Manager

Make revocation and recovery testable

The administrator should verify the intended permission at the actual controller and opening, using an authorized temporary record where appropriate. Check both grant and expiration without expanding access to unrelated doors.

If the controller is disconnected, use the selected platform’s documented synchronization procedure. The cloud-offline guide compares specific architectures; a saved administrative change is not by itself evidence of enforcement at an offline door.

Put it into practice

A decision table to keep handy