[IUG] Password Policy Settings

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Is anyone using the Password policies in Release 2007? Can anyone help clarify the following settings (described in the Innovative Guide & Reference, p. 107537):



Minimum number of non-alphabetic characters

Minimum number of numeric characters

Minimum number of special characters

- I assume that if I set the first option at 2, then people could have two numbers, two special characters or one of each. If I left that alone and set the next two settings to 1, they would be forced to use a minimum of one number and one special character. Is that the case?



Number of days before password expiration to warn user

Specify the number of days of advance notification to provide before a password expires. The maximum is 30 days. The default is '5'. - If we set it to 30 days, do people get one reminder at the 30-day mark and no more, or does it nag on some schedule, or every time they log in, until they make the change?



Limit Login Settings

Limit number of failed login attempts

Select this option to limit the number of failed login attempts. If this limit is met, the system requires a new browser session for further login attempts. Exempt Logins The Limit Login setting applies to all logins, including those you choose to "exempt" from Password Policies.

Number of failed attempts allowed

Specify the number of failed login attempts to allow per browser session.

- I don't understand the difference from the previous setting.



Thanks in advance for any guidance on implementing stronger password policies. Forcing people to change ancient and beloved passwords will not be popular (except with our network security folks), so I'd like it to go as smoothly as possible.


Cecilia M. Dalzell
Instructional Design Librarian
Arnold Bernhard Library, Quinnipiac University
275 Mt.Carmel Ave., Hamden, CT 06518-1908
203-582-3783, cecilia dot dalzell at quinnipiac dot edu<mailto:cecilia dot dalzell at quinnipiac dot edu>

"Not everything that counts can be counted, and not everything that can be counted counts." - Albert Einstein



--- StripMime Report -- processed MIME parts ---
multipart/alternative
text/plain (text body -- kept)
text/html
---