Alert generation on user lockdown

[Former Member]

Hi,

We have a client requirement in which an alert has to be set which get triggered if any user gets locked down, but he wants this alert only when any particular user gets locked down for "n" no of times in day(say 4 times a day).

In CCMS, we have one moniter by which we can keep track if any user gets locked in system, but how do we tweak that particular moniter so that only if any user gets locked down for 4 times, it should get triggered.

Apprciate your timely help.

Thanks.

[JPReyes]

but how do we tweak that particular moniter so that only if any user gets locked down for 4 times, it should get triggered.

The Monitor will be able to track locked accounts... but if an account has been locked and the user contacted your "Helpdesk" there should be a procedure in place to make sure that the person requesting the user to be unlocked is actually the owner of the account. Once that have been cleared I see no use on knowing how many times the user locked their accounts

Beside the alerts you might find in MTE SecurityLogon in CCMS

You can use report RSUSR006 to see a general overview of locked users and failed logon attempts.

Also you can keep track using SM20.

Regards

Juan

[Former Member]

Thanks for your inputs

[ImtiazKaredia]

Strange request. Why email after 4 times in a day !

Also if user gets locked once how will he get locked again unless he is unlocked by some one.

In that case a person unlocking user will be able to compile email for the user easily