When Basic Administrator accounts are locked out or unlocked in Workspace ONE UEM, a console event is generated. Both events generate a logging level 5 (warning) event. In addition to reviewing the basic login history directly from Account Settings, you can research Admin account lockouts or unlock console events by taking the following steps.
- Navigate to .
- Select "Warning and above" from the Severity drop-down filter at the top of the Console Event listing.
- Select "Login" from the Category drop-down filter.
- Select "Administration" from the Module drop-down filter.
- Apply more filters as you might require including Date Range.