0
edits
Changes
no edit summary
'''Intruder Alert Email Variables''' – because the [[User|user]] in not logged into the system the amount of information available is limited to IP Address '''@ip@''', the attempted username '''@username@''' and time '''@time@'''.
==[[Intruder Log]]==
The '''View Log''' tab is used to access the '''Intruder Alert''' log.
<u>'''View Locked Users'''</u>
The '''View Locked Users''' link tab will display all currently locked [[User|users]]that have had their account locked. <br>* Once an account has been locked for exceeding the number of permitted login attempts it will remain on the "locked users" list until the correct password is entered. This allows the administrator to see which users have been unable to log in, even if the configured lockout duration has passed and the account is no longer technically locked.
* When an account has been locked for exceeding the alloted number of attempts, after the lockout time has passed they are permitted only one attempt at the correct password. A single incorrect password at this point will re-lock the account for the configured lockout duration. In other words, once someone is on the "locked user" list they are only permitted a single wrong attempt and they will be locked for the lockout duration again. This prevent would-be intruders from having multiple attempts to guess the password each time the lockout duration has passed. * If a user is locked, then you need to go can click on the '''Set Password''' button to reactivate the account and send the [[User|user]] records and reactivate by sending a new [[Password|password]].
[[Category:Global Settings]][[Category:System Management]][[Category:Security]]