There has to be something that is running and continually locking our generic Operator account. I ran a login failure audit log and on 6/13/24 from page 1006-1084 there were failed login every 30 seconds. When I check the session management list there were 4 users successfully logged in as the Operator account. How do I find out what computer or reports may be running and locking the account? Epicor stated this isn’t possible and I should submit a suggestion. I am confused, that won’t help us now.
task agent?
I love a good mystery…
I know you can see the computer….
Did you try looking at the active user dashboard within kinetic?
What about the windows event log? That should give you the failures with the computer.
The problem is I do not know which computer is the problem, so looking at the event viewer will not help me, I do not believe. I have much more learning to do, I do not know where to find the active user dashboard.
If that is the system monitor it doesn’t show me the failed logins. Maybe I am not understanding the full functionality of the system monitor but I didn’t see anything in there. Please share your knowledge.
2 Likes
I have run that report. The report doesn’t tell me the computer that is logging in with operator, just the user account name. Are you aware of determining that info?
Oh if its not in there im not sure.
Could maybe create a BAQ to get that information, i would assume it would be in there if it was available.
1 Like
I’d be inclined to enable server logging, as well as taking a look at your IIS Logs.
1 Like
I found in user account maintenance Enable Trace Logging, Application Server log settings - Epicor ERP 10 - Epicor User Help Forum (epiusers.help)
but what I found weird is that the Current Log Directory appears to be located on the computer of the first person that logged in as ‘Operator’ this morning. We had probably 20 people that had logged in as that user but we have since added other accounts so we can hopefully prevent everyone getting locked out from this conundrum.