Parameter:
Server_RestrictedShort description: Enables or disables server access. When access is restricted, the server no longer accepts new open-database requests; administrators can still open databases.
Profile
Parameter | Server_Restricted |
Category | Security / TLS (server access / maintenance) |
Available since | At least 9.0.1 (HCL documentation) |
GUI equivalent | According to HCL no direct GUI option. Settable in the Configuration document on the NOTES.INI Settings tab. |
Possible values | 0, 1, 2 (HCL product documentation) and 3, 4 (HCL KB0033359) |
Description
According to HCL product documentation,
Server_Restricted enables or disables access to the Domino server. When access is disabled, the server no longer accepts new open-database requests. Important note from the HCL docs: administrators can still open databases even when this variable restricts server access.Values from the HCL product documentation:
0— Server access is not restricted.
1— Server access is restricted for the current server session. The setting is cleared when the server is restarted.
2— Server access is permanently restricted, even after a server restart.
Extended values from HCL KB0033359 (SPR# MIAS8A2HUH):
3— Behaves like1(session restriction), but additionally blocks replication from ID files that do not belong to an administrator.
4— Behaves like2(persistent), but additionally blocks replication of non-administrator IDs.
Important per HCL KB0033359: values
1 and 2 only prevent non-administrators from opening databases on the server — they do not prevent replication. Only values 3 and 4 also block replication unless it comes from an administrator ID.Example configuration
Maintenance during a session (released at next server restart):
Server_Restricted=1
Persistent maintenance (across restarts, manually reset later):
Server_Restricted=2
Full lockdown including replication, persistent:
Server_Restricted=4
Runtime activation via the server console (no restart required):
set config Server_Restricted=1
Release after maintenance is complete:
set config Server_Restricted=0
With
Server_Restricted=2, the server remains locked for non-administrators even after a restart — typical behavior during a maintenance window. Replication continues at this level.Notes & pitfalls
- For values
1and2, replication is not blocked per HCL KB0033359; only3and4exclude replication for non-administrators.
- Value
1is automatically reset on server restart;2and4remain persistent.
- According to an HCL community response,
Server_Restrictedonly affects NRPC connections — HTTP, IMAP, and POP3 client requests are not restricted by it.
- Cluster context: in a Domino cluster,
Server_Restrictedis the preferred way to deliberately trigger failover — together with replicated databases, clients are transparently redirected to another cluster member.
- Setting via
set config Server_Restricted=…typically takes effect immediately; a server restart is not required.
Sources (HCL Product Documentation & Customer Support)
- HCL Domino 14.5.1 – Server_Restricted: help.hcl-software.com/domino/14.5.1/admin/conf_server_restricted_r.html
- HCL Domino 11.0.1 – Server_Restricted: help.hcl-software.com/domino/11.0.1/admin/conf_server_restricted_r.html
- HCL Domino 9.0.1 – Server_Restricted: help.hcl-software.com/domino/9.0.1/admin/admin/conf_server_restricted_r.html
- HCL KB0033359 – Users can still connect to a server that has SERVER_RESTRICTED set: support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0033359