Locking or Unlocking Users 

Use

Locked users are deactivated and cannot access applications. There are two ways of locking users:

·        Automatically

The system can lock a user automatically if the user tries to log on too many times with the wrong password. Optionally the system can unlock the user after a certain amount of time elapses.

¡        ume.logon.security_policy.lock_after_invalid_attempts sets how many failed logon attempts after which the user is locked.

¡        ume.logon.security_policy.auto_unlock_time sets the amount of time after which the user is unlocked.

For more information, see UME Properties.

·        Explicitly

An administrator can lock a user using the procedure described below. The administrator must subsequently unlock the account for the user to regain access to the system.

The following procedure describes how an administrator explicitly locks or unlocks a user.

Users are informed that their user has been locked when they enter their correct user ID and password during logon. For security reasons, if they enter the wrong password during logon, they are only informed that either the user does not exist or the password is wrong.

Procedure

...

       1.      In the search results list, select the user you want to lock or unlock

       2.      Choose Lock or Unlock as required.

You are prompted to write a reason for locking/unlocking the user. This text is sent to the user if you have enabled notification e-mails. It is also stored in the user’s account history.

       3.      Enter a text and choose Lock or Unlock.