Restore User Access
Procedure​
- Open the Ransomware Defender Module by clicking on its desktop icon in the Eyeglass UI.
- Click on the Active Events tab.
- When you identify the active event, you will find a blue button under the Actions column for that event. Click this button.
- A dialog will appear. Next to the word "Action" you will find a drop-down menu. Expand this drop-down and click on Restore User Access.
- Click on Submit.
- Verify that the State column for the event changes to Access Restored.
info
These steps will unlock a user, as well as remove the lockout on SMB shares that were locked out. You may review the SMB shares that were processed by consulting the event log.