Non-disruptive system for verifying default passwords have been changed without causing security lockouts

1. A method comprising:

enabling for testing, by a processor of a computing system, user identifiers associated with a plurality of devices, prior to an initial security test;

performing, by the processor, a login attempt to each device using a default password for the user identifier of each device as part of the initial security test to test each device to ensure that the default password has been changed by a user associated with the user identifier; and

retrying, by the processor, a new login attempt only for each user identifier in an enabled state during one or more subsequent security tests initiated after a predetermined alert interval, thereby skipping login attempts for user identifiers in a non-enabled state so that a security lockout is avoided for users associated with the user identifiers in the non-enabled state.

2. The method of claim 1 , further comprising generating, by the processor, a report including each device that was accessible using the default password.

3. The method of claim 1 , wherein the login is attempted only a single time during the security test and the one or more subsequent security tests to avoid causing the device lockout for user identifiers that have changed the default password.

4. The method of claim 1 , wherein the predetermined alert interval starts at a conclusion of the initial security test and one or more subsequent security tests, the conclusion occurring when the login has been attempted for each user identifier in an enabled state, for the plurality of devices.

5. The method of claim 1 , wherein the predetermined alert interval is daily, and the security lockout interval is greater than 30 days.

6. The method of claim 1 , further comprising storing, by the processor, enabling-state data associated with the user identifier in a database, such that the database is accessed during the one or more subsequent security tests to determine which user identifiers to attempt the login.

7. The method of claim 1 , further comprising accessing, by the processor, a database to determine whether a default password information is being stored for a particular user identifier, and if so, skipping a login attempt for the particular user identifier during the initial security test and the one or more subsequent security tests.

8. A computer system, comprising:

a processor;

a memory device coupled to the processor; and

a computer readable storage device coupled to the processor, wherein the storage device contains program code executable by the processor via the memory device to implement a method comprising:

enabling for testing, by a processor of a computing system, user identifiers associated with a plurality of devices, prior to an initial security test;

performing, by the processor, a login attempt to each device using a default password for the user identifier of each device as part of the initial security test to test each device to ensure that the default password has been changed by a user associated with the user identifier; and

retrying, by the processor, a new login attempt only for each user identifier in an enabled state during one or more subsequent security tests initiated after a predetermined alert interval, thereby skipping login attempts for user identifiers in a non-enabled state so that a security lockout is avoided for users associated with the user identifiers in the non-enabled state.

9. The computer system of claim 8 , further comprising generating, by the processor, a report including each device that was accessible using the default password.

10. The computer system of claim 8 , wherein the login is attempted only a single time during the security test and the one or more subsequent security tests to avoid causing the device lockout for user identifiers that have changed the default password.

11. The computer system of claim 8 , wherein the predetermined alert interval starts at a conclusion of the initial security test and one or more subsequent security tests, the conclusion occurring when the login has been attempted for each user identifier in an enabled state, for the plurality of devices.

12. The computer system of claim 8 , wherein the predetermined alert interval is daily, and the security lockout interval is greater than 30 days.

13. The computer system of claim 8 , further comprising storing, by the processor, enabling-state data associated with the user identifier in a database, such that the database is accessed during the one or more subsequent security tests to determine which user identifiers to attempt the login.

14. The computer system of claim 8 , further comprising accessing, by the processor, a database to determine whether a default password information is being stored for a particular user identifier, and if so, skipping a login attempt for the particular user identifier during the initial security test and the one or more subsequent security tests.

15. A computer program product, comprising a computer readable hardware storage device storing a computer readable program code, the computer readable program code comprising an algorithm that when executed by a computer processor of a computing system implements a method comprising:

enabling for testing, by a processor of a computing system, user identifiers associated with a plurality of devices, prior to an initial security test;

performing, by the processor, a login attempt to each device using a default password for the user identifier of each device as part of the initial security test to test each device to ensure that the default password has been changed by a user associated with the user identifier; and

retrying, by the processor, a new login attempt only for each user identifier in an enabled state during one or more subsequent security tests initiated after a predetermined alert interval, thereby skipping login attempts for user identifiers in a non-enabled state so that a security lockout is avoided for users associated with the user identifiers in the non-enabled state.

16. The computer program product of claim 15 , further comprising generating, by the processor, a report including each device that was accessible using the default password.

17. The computer program product of claim 15 , wherein the login is attempted only a single time during the security test and the one or more subsequent security tests to avoid causing the device lockout for user identifiers that have changed the default password.

18. The computer program product of claim 15 , wherein the predetermined alert interval starts at a conclusion of the initial security test and one or more subsequent security tests, the conclusion occurring when the login has been attempted for each user identifier in an enabled state, for the plurality of devices.

19. The computer program product of claim 15 , wherein the predetermined alert interval is daily, and the security lockout interval is greater than 30 days.

20. The computer program product of claim 15 , further comprising storing, by the processor, enabling-state data associated with the user identifier in a database, such that the database is accessed during the one or more subsequent security tests to determine which user identifiers to attempt the login.