This shows you the differences between two versions of the page.
Last revision | |||
— | how_to:locked_accounts [2011/09/06 15:14] – created paul | ||
---|---|---|---|
Line 1: | Line 1: | ||
+ | ======Locked Accounts====== | ||
+ | VPOP3 has a security feature which will lock out an account after it has had several failed login attempts. This feature is to make it harder for an attacker to use a brute force or dictionary password attack on an account. | ||
+ | |||
+ | The default settings are that after more than 3 attempts to log into an account with an incorrect password, VPOP3 will lock the account for 30 minutes. You can change these settings on the **Settings -> Security Settings** page in the VPOP3 settings. | ||
+ | |||
+ | To unlock an account, you can log into an administrator' | ||
+ | |||
+ | If you can't get into the VPOP3 settings because it's the administrator' | ||
+ | |||
+ | * Go to Start -> Programs -> VPOP3 -> Configure VPOP3 in Windows. By default VPOP3 will always allow connections to the Administration pages if you use the ' | ||
+ | * Go to Start -> Programs -> VPOP3 -> VPOP3 Service Settings in Windows. This lets you into a restricted settings user interface (note you cannot use this over Windows Remote Desktop or Terminal Services or related service). Right-click the locked account and choose Unlock User. | ||
+ | * Restart VPOP3. This will unlock all accounts at startup. | ||
+ | |||
+ | The SECURITY.LOG file in the VPOP3 folder on the hard disk will record all failed login attempts, and the IP address where the login attempt came from. | ||