Features

Simultaneous session prevention/restriction

UserLock allows simultaneous logon (same ID, same password) limitation or prohibition, per user or user group.

A limit can also be set for the total number of sessions of all members of a group.  This for example useful if each department of an organisation is only allowed to open a limited number of terminal sessions on servers in order to fairly share resources.

Workstation(s) restriction

UserLock allows user or user group’s network access restriction per workstation or IP range.  By doing this, users can be limited to their own workstation, department, floor, building…

Time restriction

UserLock allows defining working hours and/or maximum session time for protected users.  Outside of this (these) timeframe(s) and/or when time is up, users will be disconnected with prior warning.

Alerts and notifications

UserLock can send popup or email alerts to the network administrators for specific events per user or group (denied logons, successful logons, logoffs…).

Remote session management

An administrator can remotely lock, unlock, logoff and reset all sessions, either from the administration console or the Web interface.

End-user assistance

Network administrators can enable:

• an option allowing users to remotely disconnect their previous session as they logon to another computer.  This will avoid users from having to go back to the previous computer.  
• a public Web interface to display system usage (per session status) in real time, allowing users to easily find an available computer; the interface can for example display systems available in a room (depending on computer naming convention), ideal for organisations with free access computers.  

Connectivity surveillance and monitoring

UserLock allows real time session surveillance and monitoring; at all times the administrator knows who is connected, from what workstation(s), since when…

Analysis and reporting

UserLock records all session logging and locking events in an ODBC database (Access, SQL server, Oracle…) for future reference.

Reports can automatically be generated at regular intervals, in order to update an Intranet Web site, or being sent by Email (using third party software)

UserLock provides 4 predefined reports:

• Session history: Comprehensive session list (logon, lock, unlock, logoff instances, users, domains, workstations…)
• Session Statistics: Displays for a given user and period, total sessions, total connection time, average time per session, per worked day or per week.  
• Agent Distribution: View of the agent installation status on all computers of the protected network zone.  
• User sessions: Instantaneous view of all user session at display time.  

Flexibility, ease of use and security

• Centralised administration
  UserLock’s administration console gives access to all options and screens, and is very simple of use; the console works as a Windows service (can be installed on a desktop).  
• Delegated administration
  Certain users can be given the ability to view and manage sessions without having access to more critical UserLock settings such as protected accounts configuration, agent distribution …
• Management via Web interface
  Remote session management is possible from any computer connected to internet.  
• Pin-pointed protection
  UserLock allows protection for a single domain, several domains (with domain approbations) or only one of an Active Directory’s Organisational Units (OU).  
• Terminal session management and 64x systems
  UserLock supports terminal sessions (Microsoft Terminal Server and Citrix Metaframe) as well as 64bit systems
• Easy setup
  UserLock installs in minutes on a standard Windows server (NT4 SP4/2000/2003), a micro-agent is automatically deployed on selected workstations.  
• Backup
  It is possible to install a UserLock backup server to guarantee protection even if the primary UserLock server crashes.  

Next Page - Usage Scenarios