When Basic Administrator accounts are locked out or unlocked in Workspace ONE UEM, a console event is generated. Both events generate a logging level 5 (warning) event. In addition to reviewing the basic login history directly from Account Settings, you can research Admin account lockouts or unlock console events by taking the following steps.

Procedure

  1. Navigate to Monitor > Reports and Analytics > Events > Console Events.
  2. Select "Warning and above" from the Severity drop-down filter at the top of the Console Event listing.
  3. Select "Login" from the Category drop-down filter.
  4. Select "Administration" from the Module drop-down filter.
  5. Apply more filters as you might require including Date Range.

Results

Where applicable, select the hypertext link in the Event Data column which contains extra detail that can assist your research efforts.