Safety Lock
Safety Lock makes Velauth read-only for your whole organisation. Use it during an incident or a suspected compromise.
Turn it on
Section titled “Turn it on”- Open Settings, Safety Lock. You need the permission to manage organisation settings.
- Turn on the switch and confirm.
It takes effect within a few seconds. A banner shows on every page while it is on.
What is blocked
Section titled “What is blocked”Every change: password resets, unlocks, account and group changes, bulk actions, restores, report changes and report sending. Approved requests that are waiting are also refused when someone tries to run them.
Secret disclosures, such as LAPS passwords and BitLocker keys, are also blocked while the lock is on.
What still works
Section titled “What still works”Looking at users, groups, computers, OUs, Group Policy and reports, and testing the connection.
Turn it off
Section titled “Turn it off”Only an Owner can turn Safety Lock off. Both changes are recorded in the organisation’s admin audit.
Limits
Section titled “Limits”The lock is enforced by the Velauth broker. It does not stop someone who already holds Active Directory rights and uses other tools directly.