In versions of vSphere earlier than vSphere 5.1, the root user can log into the Direct Console User Interface (DCUI) on a host that is in lockdown mode. In vSphere 5.1, you can specify which local ESXi users are allowed to log into the DCUI when the host is in lockdown mode. Specifying users other than the anonymous root user allows you to log which users have performed operations on the host while it is in lockdown mode.


Browse to the host in the vSphere Web Client object navigator.


Click the Manage tab and select Settings.


Click Advanced System Settings, and select the setting DCUI.Access.


Click Edit and enter the user names, separated by commas.

By default, the root user is specified. You can remove root from the list of DCUI access users, as long as you specified at least one other user.


Click OK.