User not logged 120 days

Hello

My client has a requirement that they want to have an alert to users who are not logged in the database for the last 120 days, or users must be locked.

How to get there?

Kind regards

Fran wrote:

User profile:

Administration of user accounts and of security

Password policy is a starting point, but it's not really meet the requirements of the PO.  Simply does not connect does not cause an account to expire or lock.  The account will be compared against the policy until the user does log.  So if an account is abandoned - say the user leaves the Organization - its account will be just sitting there in the open State.  Only when he tries to connect again to life of password and check the grace period.

I think the only option of the OP is to audit logons, and then use the audit trail to drive the process of identification and blocking of these accounts.

It would be great if Oracle would add a LAST_LOGON_DATE to DBA_USERS.

Tags: Database

Similar Questions

  • Lockout procedure user, who is not logged during specific days

    Dear Sir

    I need to write a procedure that locks the user who is not connected to the db for the last 45 days. I enabled session audit in my db. Which means, there NTIMESTAMP # column for the connection time and action # 100 for the connection event in the AUD $ table.

    How the procedure can be written so that it can only locked the right user. Please help me...

    Kind regards

    I don't see a version number of Oracle - and that makes a difference.

    12 c 'select username from dba_users last_login;"

    In previous versions - if you want to avoid to work through a large aud$ table (dba_audit), then two other possibilities:

    (a) create a profile (or modify the default profile) for password changes after 45 days, forcing a change of password on all users, then "select expiry_date dba_users where expiry_date.< trunc(sysdate)"="" any="" expiry="" date="" in="" the="" past="" is="" (should="" be="" -="" but="" i="" haven't="" tested="" this)="" a="" user="" that="" has="" not="" logged="" on="" for="" 45="">

    (b) to create a logon trigger that maintains a shadow dba_users and updates (inserts initially) one line with the logon timestamp. Primary key on the user name. See the table for the last hours of connection.

    In any case, be careful with some of the names of internal users

    Concerning

    Jonathan Lewis

  • Server Windows 2008 R2 - can you use for a single user remote desktop after the initial 120-day grace period?

    I installed Windows Server 2008 R2.  During the 1st 120 days, remote desktop worked for multiple users.  Now that the 120 days are up, it is necessary to purchase client access licenses.  However, is it possible to activate the remote desktop for one user without having to purchase client access licenses?  If so, I would like to ask for details.  I've been everywhere in the server options and can't seem to find the right combination.  Thank you!

    Hello

    Thank you for visiting the Microsoft answers community site. The question you have posted is related to the server and would be better suited in the Technet forums. Please visit the link below to find a community that will support what ask you:

    http://social.technet.Microsoft.com/forums/en-us/category/w7itpro

    I hope this helps.

  • User did not log on type on this computer. __

    the problem:

    Hello, trimmerda

    Because you are unable to access an administrator account, unfortunately there more that we cannot do nothing because we cannot help to circumvent security.

    You can back up your personal files and reinstalling Windows.

    http://Windows.Microsoft.com/en-us/Windows/help/install-reinstall-uninstall

    David
    Microsoft Answers Support Engineer
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • Windows Virtual PC integrated with components lock me out of my WinXP - error of OEM comments - "the system could not log. Make sure that your user name and domain are correct... »

    With my new desktop Windows 7 hardware configuration, I decided (before you consider VMware Player) to retry Windows Virtual PC; but instead of using Windows XP Mode (which is useless because the disk is inaccessible), I decided to use my own Windows XP Pro OEM. [I use it for games that won't play on Win7.  Security issues are also irrelevant, because for these games, I'm not likely to use the Web.  Of course, I always Windows Security Essentials in my OEM customers.]

    The problem here is, whenever I have to Activate my integration, features VPC opens as if the Windows XP Mode have been installed (it is not); and when the screen is turned on, it asks my user name and password.  I tried to use the name and the password that I entered when installing my XP OEM; but I get this message:

    "The system could not log.  Make sure that your user name and domain are correct.  Type your password again.  Letters in passwords must be entered using the proper case. »

    How is it that I can't access my Windows XP OEM guest when the integration features are enabled?  Only when they are disabled can I activate my OS; invited but it's counterproductive, because I won't be able to move items from my host in my comments.  Once more, if I should decide to use VPC as my host VM for Linux Ubuntu/Kubuntu, what chance is there that the activation of the integration features will lock out me my Linux guest?

    Another thing: in the Start Menu under Windows Virtual PC folder I have shortcuts for ' Windows Virtual PC ' or 'Virtual Machines' (according to the Win7 version I use, 32-bit or 64-bit); but I also have "Windows XP Mode", I have not installed.  How is that possible?  I checked the shortcut, and point it to rundll32.exe.  Should I just get rid of the shortcut, or I will incur damage to my VPC if I do?

    Hello Cooky,

    Please provide a detailed description of the issue.

    I understand the inconvenience you encountered. However, I appreciate your efforts.

    To get more information about it, we have a dedicated forum where these issues are dealt with and would be better suited to the TechNet community.

    Please visit the link below to find a community that will provide the best support.

    https://social.technet.Microsoft.com/forums/Windows/en-us/home?category=w7itpro

    I hope this information is useful.

    Please let us know if you need more help, we will be happy to help you.

    Thank you.

  • Microsoft Remote Desktop does not allow users to log on simultaneously

    Original title: problem with Microsoft Remote Desktop not allowing users to log on simultaneously

    I am currently using a MAc to connect to a desktop running windows 7. Recently, when I try to access the computer with Microsoft Remote Desktop it will launch all users on the computer. He was not used to do this, does anyone have an idea what could have caused this and how to fix it?

    Hi Bert,.

    Thanks for posting your query in Microsoft Community Forum.

    The question you posted would be better suited in the TechNet Forums. However, we can refer to the articles below and check if the problem still persists.

    Configure the remote desktop on Windows 7 systems

    Connect to another computer using Remote Desktop connection

    If the problem persists, I recommend posting your query in the TechNet Forums for the best support.

    Hope this information is useful. Do not hesitate to write to us in case you have any problems/concerns while working on your computer, we will be happy to help you.

    Thank you.

  • I have a network drive. & Passwords, I want to force their users to log in there every time and do not use the last name of user and password.

    I have a network (an Iomega iconnect nas) drive. I want to force their users to log in there every time and do not use the last name of user and password. They can change it in control of card-how can I make sure they. I'm only using Windows 7 as standalones (with lan), there is no server connection

    Hello

    I suggest you post the same question in the TechNet forum and check if it helps.

    http://social.technet.Microsoft.com/forums/en-us/w7itpronetworking/threads

  • Sun DS version 5.2 disable users have not logged for 6 months

    Hello

    I use Sun DS version 5.2.
    I want to disable users who are not logged for 6 months.

    How can I do?

    BTW, please note that the Sun DS 5.2 version and therefore there is no attribute to track the last connection of the users.


    Thank you.

    Hello
    unless you know that the login of the user changes another attribute in its profile, so this can change the modifytimestamp, then there is no other way to obtain this information by querying the DS instance.
    In this case, I think that an alternative "dirt" would be to 'interpret' the log files... search the dregs :(

    HTH,
    Marco

  • Could not log user root@127.0.0.1: not authorized

    Hello

    Hope that there is someone who can give me a clue as to why my ESX 3.5i all 3 sec made this error in the event log

    Could not log user [email protected]: not authorized

    Thank you

    Hello

    According to this: http://communities.vmware.com/thread/206438 this is a known problem. It comes to compensation and to reactivate the lock on this server mode, and the error should stay away for a while. It has nothing to do with a user login, either via ssh or the customer.

    Concerning

    Stefan

  • As a record not logged user in the underlying table apex

    Request Express 3.0.1.00.08

    I have a table with a column with the following DDL for a column:

    ACTIVATE THE 'CREATED_BY' VARCHAR2 (20 BYTES) BY DEFAULT USER NOT NULL,.
    It works fine when I am connected to the database using SQL or SQL Developer * more but I use the apex to insert records into the table.

    I created a detailed form of Mater which allows INSERT, UDATE and DELETE. This form has, as one of its columns, a column named 'CREATED_BY' for this column, I would like to the logged in user to be registered in the database. I tried to do it by doing the following:

    1. I placed an element named P3_USER on this page and makes its source = & APP_USER.

    2. in the following location "Home > Application Builder > Application 294 > Page 3 > report attributes > column attributes ' under the heading 'Tabular form Element' I made the default Type = Item (name of the application element or page) and made default = P3_USER

    When I hit the 'Add Row' button on my form it correctly dispays the logged in user (BEND) in the column "CREATED_ON", but when I hit "apply" the database stores the string "APEX_PUBLIC_USER". This is not correct because I'm logged into the system and the P3_USER element displays the word "BEND" as long as the current user, not the word "nobody".

    If anyone knows how to do so that he can accept the default value.

    Thank you
    Ben

    Sorry my bad, you can't use it in the default clause. It would be the best place to put this code in a trigger.

    CREATE OR REPLACE TRIGGER APX_TABLE_TRG
    BEFORE
    INSERT OR UPDATE ON APX_TABLE FOR EACH ROW
    BEGIN
    IF INSERTING THEN
        IF :NEW.CREATED_BY IS NULL THEN :NEW.CREATED_BY := NVL(V('APP_USER'),USER) ;  END IF ;
    ELSIF UPDATING THEN
        :NEW.CREATED_BY := CASE WHEN V('APP_USER') IS NOT NULL THEN
                        V('APP_USER')
                   ELSE
                        NVL(:NEW.CREATED_BY,USER)
              END;
    END IF;
    END;
    /
    

    Thank you
    Manish

  • Locking XP! error "the system could not log. Make sure your username and domain are correct, then type your password again.

    Original title: Locking XP!

    I tried to read all the relevant messages and walked the Earth for this solution, if someone could help me I would be grateful.

    A dear friend died and I got his PC - a fast XP with SP3 which (elderly) she only used for web & email. His account has been "Judi".

    I noticed a while back that, on the logon screen, that there is another user called 'Fiona' (she told me an old co-worker who probably stayed with her).

    Now a friend in need of a very old HP PC Lions not having completely fortunately I managed to copy his files before he was insane - I offered this newer PC it after that I have "set up" for him.

    I put a new account in place on this new PC "Ken" has been added. Then, after the deletion of accounts Judi & Fiona, I cleaned the machine with MalwareBytes, CCleaner & defrag.  All is well now with only Ken appearing on the screen logon (with an image of the appropriate icon), that I used several times in the implementation of his e-mail account and move its acrossetc files. His password is empty.

    Being the only user now Ken, I thought that it strange would its user (only) one click each time to the 'Log in', so I searched and found a box that said something to the effect «... do not show a picture of connection...» » .  That started my problem!  Removing his login "icon" brings ONLY the following - FIONA!

    When connecting a Logon Message now says "the system could not log. Make sure your username and domain are correct, then type your password again.  Letters in passwords must be typed using the proper case" the choice for this error message is 'OK', which takes you to a login screen 'Type Win98' older Classic looking (no icon user) who was behind this logon Message, with (name) Fiona appears on the login screen (former) (full name and empty below the password) , with the choice to enter the password or a stop!

    Of course the password cannot be guessed (Yes - tried blank, admin, etc.) so the only choice is to stop.

    VA F8 at startup for 'Safe mode' goes to screen black WITH Fiona login screen as usual safe mode above and booting with the CD using NTPASSWD shows the usual 1) Administrator 2) 3) invited Ken and 4) Support Microsoft - NO FIONA is shown - and I put all these passwords to 'empty '. Of course repair and recovery repair 'R' does nothing on the removal of Fiona

    This translates the original message & Fiona connection again.  How can I return to screen "image icon" connection without losing files and mail Ken Ken. Where Fiona could hide when it is not a USER of the NET?

    Yet once again, I'd appreciate any help. Brian.

    You should be able to just select (click on) "Fiona", press the delete key, and then type any desired account name.  It doesn't work?

    If you cannot type on "Fiona" in the logon window, you can use the following procedure to modify the Windows registry... or you can take the computer to an independent repairer and ask them to fix it for you.  Don't go to a chain of stores, as a "geek squad" or BigBoxStoreUSA type of place.

    Go here--> https://www.raymond.cc/blog/how-to-edit-windows-registry-key-values-without-booting-in-windows/

    Choose method 1 or method 2.  I'm familiar with Hiren (method 2), but not with the program described in method 1 (even though it seems simple).  Any ISO file you choose, I suggest to download and use ImgBurn (free) to create your CD bootable from the downloaded ISO file.

    The registry key to change is in the same place as "userinit" (which is the example used in the article), so to follow 1-5 step method or method 2 for step 7.

    You will be at HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon

    In the right pane of the registry editor, you will see a large list of items.  Scroll down the page until you see LogonType and double-click it.

    In the "Value data" box, type 1, and click OK (1 is the same either hexadecimal or decimal).

    Close the registry editor, take the CD from the drive and reboot.  You should see the Welcome screen when Windows restarts.

  • received a message that other users have logged on to my computer

    When I rebooted my computer which i rarely stop/restart, I received a message stating that the other users are logged on and I wanted to go forward.  There should be no one else except my admin account & a guest account. I ran MS Security Scan which found nothing. Should I be worried? Should I do something else?

    My computer is a Gateway desktop computer around the age of 20 months, under Vista 64-bit, do not know what other information you might need.

    Hello

    · The guest account is disconnected?

    Disable the account invited on the computer and check the results. You can check the link: enable or disable the guest account the: http://windows.microsoft.com/en-US/windows-vista/Turn-the-guest-account-on-or-off

    Also, make sure that you update the security software installed on the computer.

  • Screensaver won't turn on unless a user is logged

    We have two machines professional Vista I installed a custom screensaver.  It will not work if a user is logged on to the computer, but he that is registered in the screen becomes black and a white mouse pointer will appear.  I have Adobe flash installed and uninstalled and reinstalled without a bit of luck.  A computer has a keyboard and wireless mouse and the other are wired.  This screensaver works fine on XP.

    Thank you-

    Joan

    CUTech salvation,
    Check the sleep, hibernation, and the screen saver settings. Make sure that none of them are programmed in arrive at the same time or even within 2 or 3 minutes on the other.

    Also, check that the monitor is not set to turn off at the same time either.

    The computer properly reacts if you move the mouse after it happens.

    I think you should also update the video drivers. You'd be surprised the questions how we see, relate to the strangeness of the video driver!

    Let us know if it does.
    Matt Hudson
    Microsoft Answers Support Engineer
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • you are not logged as an administrator...

    When I go to MSCONFIG to change which starts, I keep says I'm not logged as an administrator and I need to sign out and then sign back in as an administrator to make the changes... thing is, there is only a single user account on this computer and it is configured as an administrator.

    You will need to enable the built-in Administrator, connect to it and then run analyses of malware comprehensive here.

    http://www.elephantboycomputers.com/page2.html#Removing_Malware

    All this requires a certain level of computer skills. You know better and that take the machine to a competent local computer tech (not a type of BigComputerStore/GeekSquad place) is the best solution for you.

    If you have an installation of Vista DVD (not a recovery DVDs), you can start the system with it. Select the default language, then select "repair your computer". Then select "Command Prompt". At the command prompt, type:

    NET user administrator / Active: Yes [press Enter]

    Remove the DVD and start up in Windows. You will now see an icon for administrator on the Welcome screen. Open a session.

    If you do not have a Vista installation DVD (only have a recovery disk), the computer mftr. may have given you the option to repair Vista (not a system recovery!) system in the diagnostic menu. This menu of diagnosis is the same one where you can choose Safe Mode. Get to this menu by repeatedly pressing the F8 key as the computer starts. If you do not have this option, you can make a bootable Vista file repair DVD in this link:

    http://NeoSmart.net/blog/2008/Windows-Vista-recovery-disc-download/

    Note: All the Neosmart recovery disk downloads are torrent files. There is a good explanation of the torrent on the site Web of Neosmart files. You will need a torrent as muTorrent client to get the files. Torrent client will download the .iso file with which to create the bootable DVD. You will need to use third-party burning software such as Nero, Roxio or the free ImgBurn (http://www.imgburn.com ) to burn the image .iso image file, not in the form of data.

    Once you have fixed things, log on to the additional administrative account you will be made by the suggestions below and disable the administrator account integrated yet for security reasons:

    Start Orb > Search box > type: cmd
    When cmd appears in the above results, right-click and choose "Run as Administrator" [OK]. Now, you will get the command prompt. At the command prompt, type:

    NET user administrator / active: No. [Enter]

    Exit the command prompt.

    General recommendations for creating users in Vista:

    You absolutely don't want to have only one user account. As XP and all the other modern operating systems, Vista is a multi-user system with integrated system of accounts as default Administrator and comments. These accounts should be left alone because they are part of the structure of the operating system.

    In particular, you do not want one account user with administrative privileges on Vista because the administrator account integrated (normally only used in emergencies) is disabled by default. If you use as an administrator for your daily work, and this account is corrupt, things will be difficult.  It is not impossible to activate the built-in administrator to rescue things, but there may be more that you want to do. Better not to put you in a bad situation at first.

    The user account that is for your daily work must be a Standard user, with the extra administrative user (call it something like 'CompAdmin' or 'Tech' or similar) only it for elevation purposes. As a user Standard is recommended for security reasons and will help protect your computer against infections. After you have created "CompAdmin", connect to it and change your normal user account Standard. Then log on to your regular account.

    If you want to go directly to the desktop and ignore the Welcome screen with the icons of the user accounts, you can do this:

    Start Orb > Search box > type: netplwiz [Enter]
    Click continue (or provide an administrator password) when you are prompted by UAC

    Uncheck "users must enter a user name and password to use this computer". Select a user account to connect automatically by clicking on the account you want to highlight and press OK. Enter the password for this user account (when it exists) when you are prompted. Leave blank if there is no password (null).

    MS - MVP - Elephant Boy computers - don't panic!

  • restrict users to log on to a computer

    I have a Windows 7 pro computer that is joined to a domain. I need shore locking the computer, while only 1 user can log on to the workstation.

    Hi Jim,.

    Welcome to the Microsoft community!
    The question you have posted is better suited in the TechNet forums. Please post your request there.
    Here is the link: http://social.technet.microsoft.com/Forums/en-US/category/w7itpro/

    It will be useful. For any other corresponding Windows help, do not hesitate to contact us and we will be happy to help you.

Maybe you are looking for

  • Firefox crashes immediately on startup. Won't start in safe mode.

    If this is not for my personal system, but a colleague. Our company force installation of some software updates, and he had a forced installation arrives for a Firefox version 38 ESR. The installation completes successfully, and he was not able to ru

  • Satellite M45 does not illuminate

    Hello I have a M45 series laptop Satellite and I have a problem. Its doesn't turn is not on. Earlier, I saw light battery on even when its switched to the broad, but not even now. When I try to turn it on after removing the battery and power, withdra

  • Black screen Aspire V3 - 772G

    Hello When I run the laptopt I get the black screen classic: no logo, lights increase, fan works. The problem is that this doesn't always happen. Changed the RAM, put an additional 7200 1 TB and 128 GB SSD, tried the power 30 sec with no battery but

  • Computer won't turn on after the mode 'sleep'

    My computer acted funny lately when it goes into mode 'sleep', and I have to reboot it until I can do something new. I know I'm not the only one having this problem, I've read the other posts on this problem. Anyway, my keyboard has a sleep button th

  • My office only displayed Widget Acer and Windows Live Messenger

    Original title: desktop display problem My desktop only Acer Widget & Windows Live Messenger, although my desktop folder contains everything that needs to be rendered outside the basket. There is no problem with the other user account on this compute