DIVAR IP All-in-One 7000 (gen 4) System cannot be locally accessed: lock screen loop on limited user

Possible causes and solution(s)

System: DIVAR IP All-in-One 7000 (gen 4) (DIP-74CI-8HD AIO)

Symptoms

DIVAR IP All-in-One 7000 (gen 4) system is configured with power options to set the lock screen feature to activate after 15 minutes, in accordance with the site's security policy. However, this configuration causes a specific behavior that prevents local user switching and access to the system after the screen has locked.

The behavior:

1. The user logs in with the BVRAdmin account and opens the Configuration Client.

2. After waiting for the screen/user to lock (based on the set 15-minute idle time), the user returns to the system and wakes it up.

3. A message appears stating that the user is locked, followed by a prompt for the limited user password.

4. If the password is entered incorrectly five times or left empty, the system enters a "loop" state where it no longer allows switching to the BVRAdmin account.

5. The system presents the locked limited user account and displays the message: "This computer is locked. Only the signed-in user can unlock the computer."

Open

6. The Switch User button, which would typically allow access to the BVRAdmin account, is no longer visible, and the system appears to be inaccessible without restarting or using Remote Desktop Connection (RDC).

The behavior comes from the system being locked, preventing local access after multiple failed attempts to log into the limited user account. The absence of the Switch User button after the failed login attempts prevents the user from switching back to the BVRAdmin account. This results in the system being in an unusable state until it is either restarted or accessed remotely.

Solution

There are two methods to resolve this issue and avoid the "loop" state before entering the password for the limited user five times incorrectly:

A. Switch User Before Entering the Password Incorrectly

1. Before entering the password for the limited user (and potentially failing five times), click the Switch User button in the lower-left corner of the login screen.

Open

2. This action will allow the system to log the DIP into Kiosk Mode with the limited user account.

3. You will now be able to switch to the BVRAdmin user by clicking the Switch User button before entering the wrong password multiple times.

B. Change the Account Name to BVRAdmin

1. Instead of entering the incorrect password for the limited user account, you can change the account name directly from Limited to BVRAdmin.

2. Enter the BVRAdmin password to log in and access the system.

3. This step allows you to bypass the loop by logging in as BVRAdmin without needing to restart the unit or use remote access.

The kiosk mode is based on the limited user.

But typing the password 5x times wrong is as designed and there is no real intention to change this policy.

The system's security policy is designed to prevent logging in with the wrong password five times. This policy cannot be bypassed, but the workaround of switching users or changing the account name can help avoid entering the wrong password repeatedly.

Open

Nice to know:

• Returning to kiosk mode for switching BVRAdmin user to limited user on DIP AIO 4000 is not possible

• How to access the Windows Interface (BVRAdmin account) after first configuration of DIVAR IP?