Skip to Content

UserLock & FileAudit.
Secure. Monitor. Audit.

Protect your Windows environment with authentic IS Decisions solutions. Stop credential theft and get total visibility into file access.

Request Best Pricing
IS Decisions

UserLock: Windows Logon MFA

UserLock provides a robust Multi-Factor Authentication (MFA) layer specifically designed for Windows Active Directory environments, securing the primary entry point to your network. In today's threat landscape, relying solely on passwords is a recipe for disaster, as credential theft remains the number one cause of data breaches. This solution addresses that critical vulnerability by requiring a second factor—such as a Push notification, YubiKey, or Token—for every local and remote logon attempt. By verifying identity beyond just a password, UserLock neutralizes the risk of compromised credentials, ensuring that even if a hacker steals a password, they cannot breach your perimeter.

Key Features

  • Local Logon Protection

  • Push Notifications

  • YubiKey Support

  • Active Directory Native

Click to Flip Back

IS Decisions

UserLock: Context-Aware Access

UserLock enforces granular access restrictions based on the specific context of the user's login attempt, utilizing a "Verify, then Trust" methodology. Organizations often struggle with the fact that valid credentials can be used from anywhere, allowing attackers to log in from unauthorized locations or unmanaged devices. This solution solves that pain point by allowing administrators to create strict policies based on IP address, machine name, or department. Its purpose is to shrink the attack surface significantly; if a login attempt originates from a context that does not match the user's normal behavior pattern, access is automatically denied regardless of the password.

Key Features

  • IP Address Filtering

  • Machine Restrictions

  • Departmental Policies

  • Granular Rules

Click to Flip Back

IS Decisions

UserLock: Concurrent Session Control

UserLock implements strict controls to limit the number of simultaneous sessions a single user identity can maintain across the network. A major security blind spot in many organizations is "password sharing," where employees share credentials for convenience, or where a compromised account is used to spawn multiple rogue sessions unnoticed. This tool addresses that vulnerability by physically restricting users to one (or a set number of) concurrent logins. Its primary purpose is to ensure accountability and non-repudiation; by preventing concurrent access, you ensure that one digital identity corresponds to exactly one human presence at any given time.

Key Features

  • Limit Simultaneous Logins

  • Stop Password Sharing

  • Real-Time Oversight

  • Forced Logoff

Click to Flip Back

IS Decisions

UserLock: Working Hours Enforcement

UserLock secures your network infrastructure by strictly defining and enforcing authorized working hours for different user groups. Cybercriminals often target corporate networks during nights, weekends, and holidays when IT monitoring is minimal and response times are slower. This solution addresses that risk by automatically blocking any login attempts that occur outside of a user's designated shift. Its purpose is to drastically reduce the window of opportunity for attackers. Furthermore, it can forcibly log off users when their time quota expires, ensuring that abandoned "ghost sessions" do not remain open as vulnerabilities overnight.

Key Features

  • Shift-Based Access

  • After-Hours Lockout

  • Time Quotas

  • Hard Logoff

Click to Flip Back

IS Decisions

UserLock: Machine Restrictions

UserLock allows administrators to bind specific user accounts to specific workstations or departments, preventing authorized users from logging into unauthorized hardware. A common internal threat involves high-privilege users or contractors logging into unmanaged, insecure public terminals to access sensitive corporate data. This solution solves that pain point by creating a rigid link between identity and hardware. Its purpose is to ensure that your most sensitive accounts—such as Domain Admins or Finance staff—can only authenticate from devices that are patched, monitored, and physically located within secure zones of your building.

Key Features

  • User-Workstation Binding

  • Prevent Roaming

  • Secure Terminal List

  • Hardware Auth

Click to Flip Back

IS Decisions

UserLock: IIS Web App Security

UserLock extends its enterprise-grade Multi-Factor Authentication and access control policies to Microsoft IIS web applications, such as Outlook Web Access (OWA), RDWeb, and SharePoint. Internal web portals are frequently the weakest links in an organization's security posture, often exposed to the internet with only simple password protection. This solution addresses that gap by injecting an MFA step into the IIS authentication process. Its purpose is to ensure that web-based entry points are as secure as on-premise workstation logons, protecting remote email and document access from brute-force attacks and credential stuffing.

Key Features

  • OWA MFA Protection

  • SharePoint Security

  • RDWeb Guard

  • IIS Agent

Click to Flip Back

IS Decisions

UserLock: Guest User Management

UserLock simplifies the lifecycle management of temporary accounts by allowing IT to set strict expiration dates and limited access scopes for guests. Managing vendor or auditor access is often a chaotic process, resulting in "permanent temporary" accounts that remain active long after the third party has left the building. This tool solves that pain point by automating the disablement of guest accounts after a set period. Its purpose is to maintain a clean Active Directory environment and ensure that temporary visitors cannot retain residual access to your network resources once their contract is complete.

Key Features

  • Temp Account Expiry

  • Limited Scope

  • Auto-Disable

  • Visitor Logs

Click to Flip Back

IS Decisions

UserLock: Session Management

UserLock provides a centralized, real-time dashboard that gives administrators complete visibility into every active user session across the entire network. Without this tool, IT teams are often flying blind, unable to see who is logged in where until they scour decentralized event logs after an incident occurs. This solution addresses that visibility gap by offering a live map of network activity. Its purpose is to empower admins to interact with sessions instantly; from the console, you can remotely lock, log off, or reset any session if suspicious activity is detected, providing immediate incident response capabilities.

Key Features

  • Real-Time Dashboard

  • Remote Session Kill

  • Active User View

  • Central Console

Click to Flip Back

IS Decisions

UserLock: Group Policy Integration

UserLock is engineered to integrate seamlessly with your existing Microsoft Active Directory infrastructure using Group Policy Objects (GPO) for deployment. Many security solutions require complex schema changes or dedicated servers that disrupt operations, creating a barrier to adoption. This solution addresses that deployment pain point by leveraging the tools your IT team already uses. Its purpose is to allow for rapid, scalable deployment of the agent to thousands of workstations in minutes, ensuring you can upgrade your security posture immediately without requiring a complete overhaul of your network architecture.

Key Features

  • No Schema Changes

  • GPO Deployment

  • AD Integration

  • Scalable Architecture

Click to Flip Back

Global Threat Visibility

Visualize real-time defense against international credential theft attempts. Interact with the globe to inspect threat vectors (RED) being blocked by defensive shields (GREEN).

Advanced Security Ecosystem