Messages

The 'Messages' view allows you to modify the default text messages used by UserLock. You can use this option to localize or customize the messages or notifications displayed to users or alert notifications sent to UserLock operators.

A message consists of an identifier and a text value. Several dynamic variables are available to give further information.

Please note that any upgrade to a newer version of UserLock won't modify message content. The upgrade process will only add new messages (when available) to avoid any personalization loss from a previous version.

The following identifiers are available for UserLock:

• CLOSE_PREVIOUS_INITIAL_ACCESS_POINTS: This message is displayed in the 'Previous session logoff' dialog box when a logon is denied by a restriction limiting the number of concurrent 'Initial access points' (disabled by default). You can enable/disable the ability to close a previous session when a logon is denied on 'protected accounts'.
• CLOSE_PREVIOUS_SESSIONS: This message is displayed in the 'Previous session logoff' dialog box when a logon is denied by a restriction limiting the number of concurrent workstation or terminal sessions (disabled by default). You can enable/disable the ability to close a previous session when a logon is denied on 'protected accounts'.
• COUNT_RESTRICTION_LOGOFF: This message requires the logoff disallowed sessions feature to be enabled. It is displayed to users warning them the session will be closed as session limits were reached following a change in UserLock access policies or when enforcing UserLock policies after a general network failure.
• DENIED_GEOLOCALISATION: This message is displayed to users when a session is denied due to geolocation restrictions.
• DENIED_WORKSTATION: This message is displayed to users when a session is denied due to workstation restrictions.
• DENIED_WORKSTATION_LOGOFF: This message requires the logoff disallowed sessions feature to be enabled. It is displayed to users warning them the session will be closed because workstation restrictions were reached following a change in UserLock access policies or when enforcing UserLock policies after a general network failure.
• GROUP_RESTRICTIONS: This message is displayed to users when the logon is denied due to Group restrictions.
• INITIAL_ACCESS_POINT_RESTRICTION: This message is displayed to users when logon is denied because the authorised number of concurrent 'Initial access points' authorized has been reached.
• INSTALL_WILL_REBOOT: This message is displayed on computers about to restart after the installation of the UserLock 'Desktop' agent.
• LOGON_DENIED : This message is displayed to users when logon is denied because the session number limit has been reached.
• MFA_CONFIGURATION, MFA_ERROR_MESSAGE, MFA_NEED_HELP_BODY, MFA_NOTIFICATION_HELPME_BODY and MFA_NOTIFICATION_HELPME_SUBJECT: These 5 messages are explained in details in the MFA settings help page.
• NOTIFICATION_BODY: This message is sent to UserLock operators to notify user session events.
• NOTIFICATION_SUBJECT: Subject of the message sent to UserLock operators to notify user session events.
• SAME_CREDENTIAL_POPUP_BODY: This pop-up message is displayed to users when their own credentials have been used somewhere else on the network.
• SAME_CREDENTIAL_POPUP_SUBJECT: Subject of the pop-up message displayed to users when their own credentials have been used somewhere else on the network.
• SESSION_LENGTH_LOGOFF: This message is displayed to users when the maximum session duration is reached and the session will be logged off.
• SESSION_LOCKLENGTH_LOGOFF: This message is displayed to users when the maximum session locked duration is reached and the session will be logged off.
• SHUTDOWN: This message is displayed on a computer when shutdown is initiated through the UserLock console.
• STATUS_NOTIFICATION_BODY: This message is sent to UserLock operators to notify user status changes.
• STATUS_NOTIFICATION_SUBJECT: Subject of the message sent to UserLock operators to notify user status changes.
• TIME_QUOTA_DENIED: This message is displayed to users when a session is denied due to 'Time quota' limits.
• TIME_QUOTA_LOGOFF_PERIOD: This message is displayed to users when a session will be logged off as they have reached their 'Time quota' limits.
• TIME_RESTRICTION: This message is displayed to users when trying to logon during unauthorized hours.
• TIME_RESTRICTION_LOGOFF: This message is displayed to users when their session will be logged off due to hour restrictions.
• UNINSTALL_WILL_REBOOT: This message is displayed on computers about to restart after the uninstallation of the UserLock 'Desktop' agent.
• WELCOME_MESSAGE: This message is displayed to users at logon (disabled by default).

Please note: The 'Welcome Message' includes the 'Time quota' information tag only on new UserLock installations. For any upgrade from version 6, you need to manually add the dynamic variable '%quotainformation%' to the 'Welcome Message'.

Every message value may contain the following dynamic variables between percent characters. These variables are replaced by accurate data when the value is interpreted by the UserLock service.

Variable name	Meaning
%status%	Successful or Denied depending on the result of a logon authorization (only valid for the LOGON_NOTIFICATION_SUBJECT and LOGON_NOTIFICATION_BODY messages).
%user%	The display name of the user trying to logon or logoff.
%useraccount%	The account of the user trying to logon or logoff.
%userstatus%	Current user status.
%userstatusold%	Previous user status.
%reason%	Action making the user status change.
%userstatusdetail%	Reason making the user status change.
%workstation%	The name of the current session.
%nbsessions%	The number of sessions listed by the %sessions% variable.
%initialaccesspoints%	The list of 'Initial access points' (delimited by a comma) already open by a user before the current logon try. This string is null if no sessions are open elsewhere by the user.
%sessions%	The list of sessions (delimited by a comma) already open by a user before the current logon try. This string is null if no sessions are open elsewhere by the user.
%SessionType%	Type of session.
%SessionEvent%	Session event.
%lastworkstation%	Last computer from which the user was connected ('Welcome message' only).
%lastworkstationdesc%	The "Description" Active Directory field of the last computer from which the user was connected ('Welcome message' only).
%deniedlogons%	Number of logons denied by UserLock since the last successful logon ('Welcome message' only).
%lastlogontime%	Date and time of the last successful logon  ('Welcome message' only).
%datetime%	Current time.
%GroupsDenied%	List of groups that have reached a maximum session limit disallowing the user to logon. ('GROUP_RESTRICTIONS' message only).
%refusedlogonsdetails%	History of all logons denied by UserLock and Active Directory since the last successful logon ('Welcome message' only).
%refusedlogons%	Number of logons denied by UserLock and by Active Directory since the last successful logon ('Welcome message' only).
%quotainformation%	Minimum Time quota remaining and period concerned. This variable is formatted for the Welcome Message. Just add this line at the end of the 'WELCOME_MESSAGE' text.
%period%	Time quota period.

 

• Server administration
  • Dashboard
  • Agent distribution
  • Protected accounts
  • Multi-factor authentication
  • Single Sign-On (SSO)
  • User sessions
  • Messages
  • Server Properties