Removing Inactive Administrator Accounts

The HSM allows you to disable or remove user accounts; however, administrator accounts can only be removed, not disabled. If you do not activate the HSM, this feature is disabled after the 30-day trial period expires.

For Sites defined using the "strict security settings," EFT Server enables the option to disable or remove inactive accounts automatically, and warn if you attempt to disable that setting. The option to remove administrator accounts will be enabled by default, unless during the setup process you choose not to enable this option. EFT Server prompts administrators when they login advising them of the potential removal of their account if their login failed due to unknown login name. The removal of accounts is captured in the Auditing and Reporting database for reporting.

If a user attempts to log in remotely to EFT Server with an administrator username that does not exist or an incorrect password, a warning message appears in the administration interface.

To specify automatic deletion of inactive administrator accounts

1. In the administration interface, connect to EFT Server and click the Server tab.

2. In the left pane, click the Server node you want to configure, then click the Administration tab.

3. Click an EFT Server-managed administrator account, then click Account Policy. The Account Security Settings dialog box appears.

   

4. Select the Remove admin accounts after check box, then specify the number of days of inactivity after which to delete the account.

5. Click OK to close the dialog box.

6. Click Apply to save the changes on EFT Server.