In my test environment, I have a test user that keeps going inactive. I activate him (Henry Helper) attempt to log on, mistype the password (not on purpose, but rather because I'm absent minded ) and it says the account is inactive. I go into the security tool, and sure enough the account is inactive. I'd expect a message indicating the password is incorrect or the user name and password don't match and be allowed to try again. There must be some setting I'm not understanding.

Yes, this is in the documentation.  An admin has to turn it back on.

Documentation Articles

Role-Based Security -> Security Maintenance -> Global Preferences -> Global Preference Properties

and

Role-Based Security -> Security within the Application -> Logon -> Failed Logins

OK, this time when I read these, I understand them Thanks!

Sure