Previous Topic: Frequently Asked Questions (FAQ)Next Topic: What Is the Difference between the Terms Account, Identity, and User


What Is the Difference between the Actions Account Disable, Account Suspend, and Account Lock

In all the three cases the account will not be allowed to login once the action occurs. In addition, for all the three actions, the account can be made active, at any time, by an account with Administrator privileges. The following information should help clarify the differences between these actions:

Account Lock

The account might become locked because of a policy which restricts how many times the account may attempt an action that the account is restricted from performing. The Password Retry policy on Windows is a good example of when the Account Lock action action comes into effect. For example, he is trying to log into the system with wrong credentials and violated the password policy set.

(For example: the user gives his password wrong 3 times, it will not allow him to login even though he gives the right password 4th time.)

Account Disable

The account might become disabled explicitly because of a manual action or a setting in the account which provides for a limited effect for the account. For example, consider an account that is marked as only valid until a specific date. Here the account is disabled once the current date has exceeded the date specified in the account's information.

(For example: the user creates an account that is active only till a particular date (July 19th, 2007) after which the account gets disabled automatically.)

Account Suspend

The account might become suspended temporarily by an Administrator. This suspension occurs by a manual action and does not occur automatically.

Here the account is inactive for a certain time period (say from 12/07/07 to 20/07/07) after which account gets enabled.