Active Administrator 8.7 - User Guide

Monitoring user logon activity

Monitoring user logon activity

To see user logon activity, you must set up workstation logon auditing and set the options for what type of activity to capture. See Setting up workstation logon auditing and Setting user log on activity.

To monitor user logon activity

1	Click Security & Delegation | User Logon Activity.

The display is based on the chosen settings. See Setting user log on activity.

You can sort the columns or filter the list.

▪	To sort the columns, click the column heading to toggle between ascending and descending.

▪	To filter the list, start typing in the box.

2	Use the tool bar to manage the user logon activity.

 

Table 16. User Logon Activity tool bar

Option	Description
Refresh	Refresh the display.
Logon Details	View details about a selected logon event.
Find User	Find a specific user.
Disable Account Enable Account	Disable or enable a user account.
Enable Auto Updates Disable Auto Updates	Disable or enable automatic updates to the display. If you disable auto updates, click Refresh to update the display.

Managing locked out accounts

Managing locked out accounts

For domains you choose to monitor, you can view, research, and resolve locked out accounts. You can view the reason that account is locked and locate the locked out account in Active Directory®. Based on your research, you can decide to unlock the account or disable it.

Topics 

•	Adding domains to monitor

•	Resolving a locked out account

To managed locked out accounts

1	Click Security & Delegation | Locked Out Accounts.

2	Add the domains to monitor. See Adding domains to monitor.

3	Use the tool bar to manage the locked out accounts.

 

Table 17.  

Option	Description
Refresh	Refresh the display.
Unlock Account	Unlock selected accounts.
Disable Account	Disable or enable selected accounts. A disabled account has a gray icon. An enabled account has a blue icon.
Find User	Locate a user account. See Searching Active Directory.
Locked Out Reason	Research why an account is locked before you decide to unlock it or disable it. See Resolving a locked out account.
Monitored Domains	Add domains to monitor for locked out accounts. See Adding domains to monitor.

Adding domains to monitor

Adding domains to monitor

You must add the domains you want to monitor for locked out accounts.

Adding domains to monitor

1	Click Security & Delegation | Locked Out Accounts.

2	Click Monitored Domains.

3	Click Add.

4	Select the domains to manage.

The domains are added to the list and are enabled by default.

▪	To disable selected domains, click Disable.

▪	To remove selected domains from the list, click Remove.

▪	To enable selected domains, click Enable.

5	Click Close.

6	Click Refresh.

The top pane displays any locked out accounts. You can unlock selected accounts, disable accounts, locate accounts in Active Directory®, and view the reason that accounts are locked.

The bottom pane displays the status of the managed domains. If a domain displays an error, you can copy the error to a text editor.

To copy the error to a text editor

a	Right-click the domain, and choose Copy Error.

b	Open a text editor, such as Notepad, and paste the error from the clipboard.

Resolving a locked out account

Resolving a locked out account

You may want to research why an account is locked before you decide to unlock it or disable it. You can view details about the event and locate the user in Active Directory®.

To research and resolve a locked out account

1	Click Security & Delegation | Locked Out Accounts.

2	Select the locked out account.

3	To view the reason why an account is locked, click Locked Out Reason.

Details about the event display. You can add a comment and a tag.

To add a comment

a	Click Add Comment.

b	Type the comment, and click OK.

To tag the event

a	Click Add Tag.

b	Click Select Tag.

c	Select the tag. If you do not see a suitable tag, click New Tag to add a tag. See Using tags to mark events.

d	Click OK. You can use the tag to filter the events list. See Managing audit reports.

4

Click OK.

5	To view the selected account in Active Directory, click Find User.

A search window opens with the selected account.

6	Select the account to view the account details.

7	To return to the locked out account, click Security & Delegation | Locked Out Accounts.

Based on your research, you can unlock the account, or disable it.

To unlock the account

a	Click Unlock Account.

b	Select Reset Password.

c	Enter and confirm the new password.

d	By default the user must change the password at their next logon.

e	Click Unlock.

To disable the account

a	Click Disable Account.

b	Click Yes.