Password Expiration and Account Locking

Configuration > Users > Password Expiration and Account Locking

A user whose password is expired can login, but only to update the password. Once the password is updated, the user will be forced to login again with the new password to regain access to the system.

An administrator with sufficient permissions can manually set a user's password to expired by selecting the Expire Password check box on the user configuration page. If a user's password is manually expired, that user will have to provide a password at next login, just as if the password had expired normally.

CISPro Global also locks a user account when the user fails to provide the correct password 3 times in a row (the counter is reset when the password is entered correctly). When the account is locked, a Global or Site Admin can enter the account via the System Configuration | Users link to unlock it.