To get to this screen, go to Users page, click on the appropriate user, and go to the General page for that user.

If you want to change the user's Password, you should enter it into both the Password and Confirm Password boxes. Note that passwords are case sensitive. Minimum password lengths are set on the User Security page.
You can optionally define a Group for your users. This lets you assign certain settings en masse to your users.
The Comments box lets you specify administrator comments for this user account.
The Assistant box lets you specify an assistant for this user. You can enter either a local user account name, or an email address of a remote person. (Note. Users can also set/clear the assistant by email, by sending messages to the Mailer_Daemon user, or by using a web browser (see WebMail Server)).
If you choose Only send to assistant, then any messages coming to this user will only be sent to the assistant, not to this user (unless the message is coming from the assistant - see the notes on assistants for more details.
The Forward To
box lets you specify an email address that any messages to this user will
be forwarded to. If you have forwarding enabled, then messages will not be put into this user's local mailbox
as well. Note - to use forwarding, you need to tick the Use
Forwarding box as well. (Note. Users can also set/clear the forwarding
address by email, by sending messages to the Mailer_Daemon user, or by using
a web browser (see WebMail Server)).
If you precede the Forward To Address
with the text SMTP: then VPOP3
will use LAN Forwarding to send
all mail for this user to another email server on your LAN/WAN. In this
case you should specify the Forwarding Address as:
SMTP:<recipient>@<domain>@<serveraddress>.
The Use Forwarding option lets you enable/disable the Forward To email address without having to erase it from the settings.
If a user is set as an Administrator, then they can view/modify the VPOP3 settings
If a user gets locked out due to too many invalid logins (as defined on the User Security page) then the Account Locked Out checkbox will be checked, an administrator can clear the box to remove the security lockout before it automatically removes itself.