UserLock Documentation
UserLock Documentation
You are here: Reference > Console > Web application > Environment

Environment

The "Environment" section of UserLock allows you to view the protected machines and users, as well as to set certain server properties.

You can access the Environment section by clicking on the Icon environment icon in the application menu. The submenu allows you to navigate through the different pages of the section.

List of Machines

The Machines submenu allows you to access the page listing all the machines found in Active Directory Organizational Units protected by UserLock. From this page you will be able to configure the installed agents and perform actions on the machines.

For each machine, you will see by default :

  • Its name
  • Its role (workstation, server, DC, IIS, NPS)
  • Its IP address
  • The available agents
  • The date the agent was last checked
  • The date of the last detected activity of the agent

Other columns can be displayed, and the table can be filtered and sorted on all columns.

For each machine, you can also perform the following actions:

  • Reboot
  • Shut down
  • Wake up
  • Initiate a remote connection
  • View details

Manual Agent Installation

In order to protect user access to the network, you must install UserLock agents on each machine to be protected. Depending on the roles of a machine, you will be able to install Desktop, IIS, NPS and Mac agents.

To install, uninstall or update an agent, simply click on the agent button and choose the desired action from the menu that appears.

In the menu, you will also find additional information, such as the version number or possible issues to be addressed.

The color of the button of the agent reflects its status:

  • : The agent is not installed on the machine.
  • : The agent is installed and up to date on the machine.
  • : The agent is installed but an update is available.
  • : The agent is installed but needs to be updated to be fully functional.
  • : The agent information is not available due to a communication problem with the machine.
  • : The agent is being installed.
  • : The agent installation has been started but requires additional manual configuration on the machine. In this case, the sub-menu will provide a link to the documentation to guide you through the configuration.

When you initiate the installation or uninstallation of an agent, you are notified of the execution of the action via the administrator actions icon:

By clicking on this icon, the list of your last administrator actions and their results appear:

You can also find the list of actions performed by all administrators in the Administrator Actions Report.

Installing Multiple Station Agents on the Fly

You can install Desktop agents on multiple machines at once. When you hover over the row of a machine, a checkbox appears next to the machine name. After checking the machines you are interested in, simply click the "Actions" button and select the "Install/Update Desktop Agent" option.

Note : For IIS and NPS agents, this option is not available, you must perform each installation individually.

Automatic installation of Station Agents

You can automatically install Desktop Agents on all machines in your protected zone. We recommend that you enable this feature. This way, as soon as a new machine is added to your protected zone, the agent will be automatically installed, and you will be sure that all machines will be protected.

Activation of this feature can be done from the machines page using this button:

For more information on the automatic installation of Desktop agents, you can consult this page of the UserLock console documentation.

Machine Details

In the UserLock web application, you can easily view all the information about a machine by clicking on its name. This opens a dashboard window with a summary view of the machine's data.

  • Agent distribution: list of agents available on the machine, with the status and available actions of each agent
  • Daily activities: number of sessions that have been opened, refused connections, users that have used the machine, and duration of the time the machine was in use
  • Active sessions: list of active sessions running on the machine, with the user name, type and status of each session
  • Events in the last few days: statistics on the number of sessions opened per day according to their type, the number of refused connections, MFA events and connected users

The left pane menu also provides links to all available reports. Each report is already pre-filtered to show only the data for the current machine.

User List

The Users submenu allows you to access the page listing all the users in your Active Directory who have logged on since UserLock was installed.

For each user you will see by default :

  • The user name
  • The number of active sessions
  • The date and machine of the last login
  • The date and machine of the last disconnection
  • The user's MFA configuration
  • The status of the user

Other columns can be displayed, and the table can be filtered and sorted on all columns.

You will also be able to perform actions on users (blocking the user, managing MFA Help Requests).

User details

In the UserLock web application, you can easily consult all the information of a user by clicking on his name. A window will then open with a dashboard offering a summary view of the user's data.

  • Activities of the day: number of sessions that have been opened, refused connections, separate machines used, total session time
  • Active sessions: list of active sessions currently being run by the user, with the name of the machine, the type and the status of the session for each
  • Events in the last few days: statistics on the number of open sessions per day by type, number of refused connections, MFA events and machines used
  • MFA Configuration: user-configured MFA methods
  • Working Hours: summary of all connection time by the user (default for the current week)
  • Effective Restrictions: summary of UserLock restrictions applied to the user. The details can also be viewed by clicking on the "Details" button

The left pane menu also provides links to all available reports. Each report is already pre-filtered to show only the data for the current user.

Server properties

The configuration parameters of the UserLock server have been grouped together on this page. However, this first version of the web application only contains a limited number of them. All the other parameters will be available in the next version, planned for Q4 2022.

For now, here is the list of available properties.

  • Multi-factor authentication: setting the functionality of recovery codes, the IIS MFA URL, the functionality of the help button, and customizing the various messages
  • Agent Deployment: set the functionality for automatic installation of Desktop agents and automatic start of the Remote Registry Access service
  • Email Settings: configuring the SMTP server used by UserLock to send you email
  • Webhook: setting the URL to receive webhooks sent by UserLock