Locked Account

[darth_smalls]

I have a customer who is constantly getting locked out of the IPO.
Each time I remote into their site, both my admin account and the customer account show locked as below:

In order to remedy this, I have saved an offline copy of their config, which I launch and then access Security Settings.
I log into security settings and re-enable the accounts as below:

My question is, how/why is this happening?
This is not our only customer that has had this occur.

The system is on 9.1.8.
They are using IP 96XX phones on a PRI.
Any other details needed from me?

Thanks in advance.

Make it happen
May the force be with you

 

[Nik]

Hi
you can check into the system status audit log is there any application or user try to login via these accounts.
becuase multiple failed login can block accounts for 10 min or permanent.

try system status audit log

please check link

http://www.ipofficeinfo.com/docs/Manager_Opening a Configuration.pdf

Thanks
Niitn Rawat
(NIK)

nik

 

[sizbut]

Locked - Idle
This status indicates the account has been locked by passing the number of days set for the Account Idle Time on the security General Settings tab without being used. The account can be enabled manually by setting the Account Status back to Enabled.

Stuck in a never ending cycle of file copying.

 

[critchey]

As stated above someone or something is trying to access the control unit, failing 3 times, and then getting locked out. If your control unit is accessible directly from the internet (no firewall between internet and control unit) then it could be someone trying to hack you. I only lean towards that being the issue since you are seeing it on multiple sites as this is not secure and should not be done.

 

[darth_smalls]

I did notice the "Account Idle" setting was set to 1 day.
I've changed it to 30 days and will monitor it for the customer.

Make it happen
May the force be with you

 

[sizbut]

Set it to zero to disable it. If you really need account expiry on any of the user accounts you can set an expiry date against the particular user's security settings and write that date in your diary.

Stuck in a never ending cycle of file copying.