Admin: override Password 60 Minute Lockout

Users, in my experience, are bad at password management. I had an experience today that pointed out what I perceive to be a missing feature of your service.

A user forgot his password, made 4 attempts to access his account, then promptly recieved an email stating that his account was locked for 60 minutes. I, as a super admin, and Ringcentral's own tier 1 and 2 support could not remove this lockout.

Goal: I would like for account admins to have the ability to remove account locks from user accounts.

Some info:

User password resets are intentionally disabled on our account.
The first lockout duration was 60 minutes. There were no shorter duration previous to this. This is overzealous for a normal user account in my opinion. A 5 minute lock (which also prompted the user to contact his administrator) would be a good first step, followed by an hour lock
The user typed in his password only about 4 times by his recollection. Again, following this with a one hour lock seems a little overzealous.
There is no feedback in the UI (on Ringcentral mobile or web) letting the user know about the lockout, only a security email sent. (I assume this is a security precaution)

I hope you can agree that this feature would make using Ringcentral a lot smoother for admins and

Thanks for your consideration.

Karim Khalil

1,232 Points
:(

Posted 4 years ago

<<
<
1
2
next page
last page

<<
<
1
2
next page
last page

2 years ago

Chris Berglund

110 Points

This is still an issue that occurs regularly and is a pain to deal with and a time suck whenever it happens. This feature needs adjusting ASAP.

Comment

1 person likes this

1 year ago

Phone Call

132 Points

This reply was created from a merged topic originally titled Admin permissions to clear user account lockout.

Hi team!

We have customers who would like admins to have the permissions to clear an account lockout for their users. When users lock themselves out of their accounts, a password reset done only by RingCentral Support can clear the 60 minute lockout, not a password reset done by the user or the super admins on the account.

Our Support team has had several requests for this ability for super admins, as it saves the customer time :)

Thank you!

Comment

1 year ago

Craig Lohman

1,066 Points

Ditto the previous comments. There should be a simple checkbox that the administrator should have access to that would remove the 60 minute lockout period immediately.

Comment

2 people like this

1 year ago

TLAPA

320 Points

This problem is going on three years now and still no resolution. This is a BIG problem. This is costing my business money whenever a call center representative can no longer work for the duration of this dictatorial policy requirement. Are you kidding me that you can't provide the admin with the ability to re-enable the user? Starting to regret my decision to go with this service.

Comment

5 people like this

1 year ago

Rona Orenstein, Employee

412 Points

This reply was created from a merged topic originally titled Admin to be able to unlock a user's account rather than calling into RC Support.

US - if a user's account is locked out... we have to call RC Support to have them reset it... then it unlocks the account. As Admins, we want to be able to unlock user's accounts ourselves.

Comment

2 people like this

1 year ago

Jay Nichols

2,820 Points

Once again, crickets. VERY OLD crickets.
Edit: the life span of a cricket is only 12 weeks. These requests live forever.

(Edited)

Comment

4 people like this

1 year ago

Tony Romanelli

266 Points

+1. We've experienced this issue one too many times. It seems somewhat ridiculous that this feature has not yet been implemented after years of requests.

Comment

3 people like this

1 year ago

Cecile Glassy, Champion

21,118 Points

USA-based acct | 2287 Users | 3800 DID lines | 28 sites | all Polycom VVX500 phone handsets

2018-05-31 Saadet or Mike Ferringer - can you please request an update on this.

Comment

2 people like this

2018-06-06T13:56:12+00:00

Saadet - Community Moderator, Official Rep

64,682 Points

Hey Cecile,

Sorry :( I never heard back from our Product Team about an ETA.

1 year ago

Cecile Glassy, Champion

21,118 Points

USA-based acct | 2287 Users | 3800 DID lines | 28 sites | all Polycom VVX500 phone handsets

2018-06-06 As a short-term workaround::: reducing the lockout "time" as that would not require major User Interface changes.

As was explained to me, things that do not require a total recode on the backside for the Service Web portal can be done more quickly and with less moving parts involved.

STAY TUNED and keep voting for this.

RingCentral knows this management interface issue needs to be completely fixed and that is also getting attention.

Comment

6 people like this

1 year ago

Cecile Glassy, Champion

21,118 Points

USA-based acct | 2287 Users | 3800 DID lines | 28 sites | all Polycom VVX500 phone handsets

2018-06-28 Is there any way we could have RingCentral set our Web Portal account access that for Regular Users to be ONLY via their Google Login instead of RingCentral password?

This is the only reason they lock themselves out of RingCentral all the time.

However in our organization, all other access to everything (all the other portal logins everywhere else) are via their Google Gmail Account Login for all employees already - so they always know how to do it that way.

Is this an option?

(Edited)

Comment

1 year ago

Chris Duquette, Champion

16,316 Points

something should happen, even a quick patch between now and a final solution would be received well at this point, i think.

Comment

2018-07-10T14:24:51+00:00

J.B. Ferguson, Champion

36,496 Points

FWIW, as a software developer I can tell you that in most cases there is no such thing a a "quick patch". A patch is a set of changes to a computer program or its supporting data designed to update, fix, or improve it. This includes fixing security vulnerabilities and other bugs, with such patches usually being called bug fixes, and improving the usability or performance.

A patch to fix a bug would therefore be a solution. As such, any solution is a final solution when it comes to a bug fix (unless you are talking about making the GUI look pretty to "finish up" the solution).
Finally, depending on the coding involved, in most cases any fix may not be "quick". Some bug fixes require a complete rewrite of a module or other areas of code.

2018-07-10T15:33:38+00:00

Chris Duquette, Champion

16,316 Points

yeah guess i was using the wrong terms, just meant something to hold us over until they can make it a final solution. if that's not possible, due to "too hard to rewrite all the coding" or "security protocols" or whatnot, then so be it.

2018-07-10T15:43:53+00:00

J.B. Ferguson, Champion

36,496 Points

That's my point....if they make any changes ("something", as you term it) to hold everyone over, it would be a fix/final solution. It's either fixed or not in program development when something isn't working as intended -or- not as the client wants it to work (with RIngCentral users being the clients in this case). If RingCentral doesn't see this as a "bug" or a functionality shortfall, then it will likely never be fixed. If they listen to their clients and decide to make the functionality as requested by their clients, it will be fixed when they deem appropriate.

(Edited)

2018-07-10T15:52:15+00:00

Chris Duquette, Champion

16,316 Points

makes sense.

2018-07-12T20:08:29+00:00

BalDentalInc WORKINGHOURS

70 Points

Yes, I just called Ring Central to get this issue escalated.

2018-08-14T11:53:25+00:00

Matthew Burt

204 Points

There are most definitely patches that provide quick fixes and/or temporary solutions in programming that do not solve the problem wholly or do not encompass everything the company/programmers want to do with the particular feature. Instead it patches a "hole" in their program that many customers for years have complained about as a quick fix to hold everyone over till they get a more permanent solution. Quick is a relative term of course, but there is no need to pick apart people's words.

Chris, your original post was fine and correct.

9 months ago

Bob Robinson, Champion

3,662 Points

Wonder how many votes are needed to get the attention of the developers? I think 105 votes is more than I have seen on just about any idea.

Comment

2018-12-12T16:00:52+00:00

Saadet - Community Moderator, Official Rep

64,682 Points

Hey Bob! I believe our Product Team is working towards a solution for this issue but they haven't given me many details just yet. When I learn more about the solution, I'll share!

2018-12-28T19:58:41+00:00

W H

258 Points

When it is easier for me just to delete the extension and add it back again and make the password what I want it to be, reprovision, etc... faster than waiting for the lockout, then the problem is with the admin console. They need to fix this. When we are setting up a call center and have new people sitting on their hands for HOURS because of a technical detail we can't control, it makes the tech services look bad...and that makes us shop for another provider. This is basic. This is an old request... and it should be easy to fix. If I can change the password, then when I do the lockout should be cleared. Simple.

7 months ago

Zach Francisco

92 Points

Please add this. Thank you!

Comment

1 person likes this

7 months ago

Jeff Guyette

190 Points

We're a relatively small group, but we too have encountered this a couple times as well. The idea that I - as the full system admin in my own system - do not have the rights/privelages to unlock these accounts is simply absurd. Why in the world should I need to call RC Support to have this done??

As others have mentioned, this is pretty much system-admin-functionality 101.
It's unfortunate to see that RC has not yet addressed this, after being asked for over 3 years ago, and with more than 100 admins having voted in their support of having this needed/necessary functionality added.

I hope to hear more from the RC Product Owners here in the forums very soon.
Thank you!

Comment

1 person likes this

7 months ago

Chris Rosa

1,360 Points

This was posted 3 years ago. How is this not implemented yet? As super admin, you should be able to override.

Comment

2 people like this

2019-02-20T00:13:16+00:00

ORTHOPAEDICS, Champion

272 Points

I'll just go ahead and beat RingCentral to the reply, since this is the only answer in 3 years:

Sorry, we have not received an ETA on if/when this may become a feature.

You do have the option of contacting our Support Team who can override the lockout as long as they can verify you as an Admin on the account.

2019-02-20T14:42:55+00:00

W H

258 Points

It's a tremendous reason to leave RingCentral for another VoIP provider. I have a small call center with temps who routinely lock themselves out. How on Earth did anyone think it would be okay for us to leave an agent off-queue for an hour like this? What I've had to do as a workaround is set up all agents' phones with a pool email address that I can access so that I can do the reset on their behalf. The side effect, which is okay in our environment, is that they may not use the app or inbound voicemail, which I configured in the template.
For keeping executives happy, the inability to unlock accounts make administrative technologists look stupid. Come on RingCentral... this request is THREE YEARS OLD. It's a checkbox or a button on the admin pages. That's it.

7 months ago

Sam Hart

80 Points

I agree

Comment

1 person likes this

7 months ago

Saadet - Community Moderator, Official Rep

64,682 Points

Official Response

Hey Everyone! I just followed up with our Product Team regarding this thread. This is on their radar and they have some plans for creating a better experience and solution for Admins :)

The plan is to allow Admins the ability to unlock a User's account and to also set the threshold and duration of the lockout for the entire account.

Currently I have not been given an ETA for a release but I'm closely watching this one! I'll provide more updates as they become available

Comment

3 people like this

5 months ago

Chris Rosa

1,360 Points

Hey there... Any update on this?

Comment

1 person likes this

2019-04-18T14:35:12+00:00

Saadet - Community Moderator, Official Rep

64,672 Points

Hey Chris, still no ETA. When that changes, I'll post an update :)

2019-04-18T16:07:03+00:00

Teresa Habeck, Champion

1,476 Points

Why is there no update on this. This does not make any sense to why Ringcentral has chosen to take the ability away from the customer admins to unlock accounts.

2019-04-18T22:33:53+00:00

Chris Rosa

1,360 Points

How about as a short term solution, add it to the API so we could execute the reset via a CURL command. This would be much better than having to phone into support, until you can get it added to the admin console.

4 months ago

Saadet - Community Moderator, Official Rep

64,682 Points

Official Response

Hi Everyone,

Good news! Our Product Team has this on the roadmap. Right now they are hoping for our 19.3 release but if they run into a snag, it may be our 19.4 release.

Super happy that it's planned for later this year :) I'll keep you all posted as we get closer to the release.

Comment

5 people like this

3 months ago

John D

60 Points

Whats the deal with this? Is there still NO way for us SuperAdmins to release this ridiculous lock?

Comment

2019-06-20T16:21:52+00:00

Devane

294 Points

We had this same issue. Actually 2 similar issues, one IT was able to adjust our password settings and the other we had to put in a ticket with RingCentral and they adjusted. We no longer get locked out. Sorry, I don't have the specific steps.

3 months ago

Jim Hoyt

82 Points

This reply was created from a merged topic originally titled Admin unlock account after security lockout.

1. US

2. Pharmaceutical sales

3. When a user gets a 60 minute security lock. Account Admins should be able to unlock that phone. Our primary customer service number got locked this a.m. and we could not take calls from our customers. This causes a lot frustration for our customers and our customer service personnel. If we were an emergency service provider this could be a life endangerment issue. So please do not take this request lightly.

4. We would be able to answer calls....

5. Ability to answer the phone.

6. 26

Comment

2 months ago

Clint Tate

66 Points

Wow how is this not included, the CEO accidentally entered his password incorrectly 4 times, got locked out. I reset password but cannot over ride the lockout.
CRAZY!!

Comment

2019-07-11T13:55:12+00:00

Saadet - Community Moderator, Official Rep

64,340 Points

Hey Clint, I know it's frustrating :/ But like I mentioned earlier, the Product Team is fixing this for admins :) When the feature is released, I'll respond back here with a knowledge article that walks you through the new settings!

2019-07-11T15:51:28+00:00

Chris Berglund

110 Points

Admins have been complaining about this lack of a basic feature for at least 4 years since the original post, and the best we can get from you is still that the Product Team is fixing it. Do you at least have an ETA for this to be complete?