Skip to content
Breadcrumbs

USPS Process Guide –
Appendix J – Security

Online Lockout Processing for Individual Users

The HR2 database allows security coordinators to view their users security information. Lockout groups can be assigned. This gives the agency the ability to restrict or lockout users from making updates.

Screen: HR2LO
Prerequisites: None
Key Fields: AGENCY, USER ID

Note: When switching a user’s access from unlocked to locked or locked to unlocked, access is not changed until the user has logged off of USPS. If the lockout or unlock is done toward the end of the day, all users logging on the following day would have lockout changes in effect.

Step Action
1 Access HR2LO using agency number.
2 Press Enter.
3 Enter R in the first column of the user to be updated.
4 Enter the following fields as required:
LO GROUP (Optional)
Lockout group number. This field is used to group numbers together for lockout purposes. Valid values: 000–998.
LO IND (Optional)
Lockout indicator.
Y User is locked out.
N User is not locked out.

Note: You may lock out or unlock individual users by replacing the lockout indicator. You may also lock out or unlock groups of users in predefined lockout groups using CMOXX.
5 Press Enter.

Online Lockout Processing for Lockout Groups

Screen: CMOXX
Prerequisites: HR2LO
Key Fields: AGENCY, USER ID
Step Action
1

Access CMOXX by entering the command line as follows:

> GD___________LOCK______________________________ON CMOXX
2 Press Enter.
3 Enter the following fields as required:
SELECT OPTION NUMBER (Required)
1 Lock out group – agency number and lockout group required in COMMAND QUALIFIER field.
2 Lock out all – agency number required in COMMAND QUALIFIER field.
3 Unlock group – agency number and lockout group required in COMMAND QUALIFIER field
4 Unlock all – agency number required in COMMAND QUALIFIER field.
COMMAND QUALIFIER (Required)
Enter agency number and group depending upon option entered in SELECT OPTION NUMBER field.
4 Press Enter.
5

Verify changes on HR2LO. If group was locked out, a Y should appear in the LOCKOUT INDICATOR field for all users in the group.

Note: Agencies can set up users in lockout groups manually on the HR2LO screen or user security profiles can be linked to lockout groups automatically on the HR2LO screen when a user is set up in USPS. Contact the USPS security coordinator to setup the link between user security profiles and lockout groups.

Batch Lockout Processing for Lockout Groups

Screen: HNKLO
Prerequisites: HR2LO
Key Fields: AGENCY

Note: The HNKLO screen permits a user to schedule the batch lockout process for locking out or unlocking a user’s access if the user is in a predefined lockout group. The lockout and unlock dates indicate the day the batch cycle will execute your lockout process. When entering a date where no batch cycle is scheduled, the lockout process will not execute until the next batch cycle following the date entered. Typically there are no Saturday, Sunday and bank holiday batch cycles.

Note: Agencies can set up users in lockout groups manually on the HR2LO screen.

Step Action
1 Access HNKLO using agency number.
2 Press Enter.
3 Enter R in the COMMAND field.
4 Enter the following fields as required:
LOCKOUT GROUP(S) (Optional)
Enter the group(s) to be locked out during the batch lockout process. Valid group values: 000–998. Or enter 999 in the first lockout group to indicate locking out all groups.
LOCKOUT DATE (Optional)
Enter the date the lockout process should lock out the groups indicated.
UNLOCK GROUP(S) (Optional)
Enter the unlock group(s) to be unlocked during the batch lockout process. Valid group values: 000–998. Or enter 999 in the first unlock group to indicate unlocking all groups.
UNLOCK DATE (Optional)
Enter the date the lockout process should unlock the groups indicated.
5 Press Enter.
6 Following the lockout process, verify the affected user’s lockout status on the HR2LO screen.