Account Lockout

You can configure Laserfiche to keep track of the number of consecutive failed login attempts and automatically disable that user account when the failed attempts reaches an administrator-defined limit. For more information, see Password Fraud Protection.

Important: This feature will not disable users that have the Manage Trustees privilege.

To set an account lockout threshold:

  1. Start the Laserfiche Administration Console.
  2. In the console tree, expand the desired Laserfiche Server item.
  3. Select the desired Laserfiche repository.
  4. If security has been enabled on the selected repository, log in as any user who has been granted the Manage Repository Configuration privilege.
  5. Expand the Repository Options item.
  6. Click the Settings item.
  7. From the Action menu, click Properties. The Settingsdialog box will appear.
  8. Select the Account Lockout tab. ClosedClick to view screenshot.
  9. Select the Account will lock after a number of failed logon attempts check box.
  10. In the Number of tries allowed before account locks option, set the maximum number of failed attempts that can occur before the account will be automatically disabled.
  11. Optionally, you can also lock accounts if they have not been used for a specified period of time. Select Account will lock after being inactive. In the Length of inactivity in days before account locks option, specify the number of days that an account can go unused before it is locked.
  12. Click OK to save your changes.

To set an account lockout threshold:

  1. Open the web client management page. Sign in as any user who has been granted the Manage Repository Configuration privilege.
  2. Select Users.
  3. In the upper right corner, select Account Lockout.
  4. Select Account will lock after a number of failed signin attempts. In the Number of tries allowed before account locks option, set the maximum number of failed attempts that can occur before the account will be automatically disabled.
  5. Optionally, you can also lock accounts if they have not been used for a specified period of time. Select Account will lock after being inactive. In the Length of inactivity in days before account locks option, specify the number of days that an account can go unused before it is locked.
  6. Click OK to save your changes.