Configuring access policies for the Console

Force password change the first time a user logs on or following a password reset.

Local accounts

The systems forces the user to change the password during his/her first logon following a password reset.

The system does not force users to change passwords.

Force password change when the password has not been changed in X days.

Local accounts

The systems forces the user to change the password if the password has not been changed during a configurable number of days (from 7 to 365 days).

Force password change the when the password does not comply with strict password rules.

Local accounts

The systems forces the user to change the password if the password does not comply with password strictness rules.

Allow automatic LDAP login.

LDAP accounts

When the LDAP user is logging on for the first time, the system populates an account with the Observer role and authenticates this user.

To make this work, ensure that LDAP authentication is enabled on the Console.

When the LDAP user is logging on for the first time, the system denies access. LDAP users who have been previously authenticated in the Console will continue to have access.

Disable account when the user has not logged on for more than Y days.

Local and LDAP accounts
with an Administrator, Operator,
Observer, or Export role.

The systems disables an account if the user has not logged on during a configurable number of days (from 7 to 365 days).

The system does not disable accounts.

Disable account following Z failed log-on attempts.

Local accounts

The systems disables an account following a configurable number of failed logon attempts (from 1 to 5 attempts).