Block a user
Blocking a user immediately stops their access to the network. This action is useful when detecting a malicious or risky connection, as you can quickly terminate all existing sessions and prevent any new ones.
Useful resources
Respond instantly to a suspicious or compromised account.
Block a user who continues to violate access policies.
Temporarily suspend an account while investigating unusual activity.
From the user dashboard → click Block the user in the user actions.
From a user table → click Block the user in the inline actions.
A dialog opens, allowing you to configure the block settings.
When blocked, the user sees a customizable message at their next logon attempt.
Example: “Your account is blocked.”
Force logoff for all existing sessions → immediately ends all of the user’s sessions. No warning, unsaved work will be lost.
Leave existing sessions open but refuse new logins → prevents new logins but lets current sessions continue.
In the users table, the status shows Blocked.
In the user dashboard, a banner indicates the user is blocked.
UserLock only blocks the types of sessions it monitors.
Example: if UserLock only monitors workstation and terminal sessions, blocking will not prevent Wi-Fi, VPN, or IIS sessions unless those are also monitored.
From the user dashboard → click Unblock user in the banner.
From a user table → click Unblock the user in the inline actions.
Once unblocked, the user is again subject to their usual access rules and restrictions.