IFPCSecurIDAuthenticationProperties::SecurIDNameLockEnabled property

Applies to: desktop apps only

The SecurIDNameLockEnabled property gets or sets a Boolean value that indicates whether the RSA Authentication Manager name locking feature is enabled.

This property is read/write.

Syntax

HRESULT put_SecurIDNameLockEnabled(
  VARIANT_BOOL fSecurIDNameLockEnabled
);

HRESULT get_SecurIDNameLockEnabled(
  VARIANT_BOOL *pfSecurIDNameLockEnabled
);

' Data type: Boolean

Property SecurIDNameLockEnabled( _
  ByVal fSecurIDNameLockEnabled As VARIANT_BOOL, _
  ByVal pfSecurIDNameLockEnabled As VARIANT_BOOL _
) As Boolean

Property value

Boolean value that indicates whether the RSA Authentication Manager name locking feature is enabled.

Error codes

These property methods return S_OK if the call is successful; otherwise, they return an error code.

Remarks

This property is read/write. Its default value is False (VARIANT_FALSE in C++).

If the Agent Host record for a Forefront TMG computer in the RSA Authentication Manager database requires name locking, you must enable name locking on the Forefront TMG computer. If the RSA Authentication Manager server requires name locking and the Forefront TMG computer does not enable the name locking feature, all authentication requests from the Forefront TMG computer will be denied. If the RSA Authentication Manager server does not require name locking, but it is enabled on the Forefront TMG computer, the RSA Authentication Manager server can process requests without using name locking.

A malicious user can permanently lock a user by performing many logon attempts.

Requirements

See also

FPCSecurIDAuthenticationProperties

Build date: 7/12/2010