Lotus Password and Windows Active directory

Hi,

I want to have an idea about the equivalent of the Windows 2000 password and the Lotus Notes complexity password.

Do you know if their is a document or information’s about it.

I need to setup the two password so when a user change their Lotus password, it will be conform with the Windows 2000 password policy.

Thank you for your help.

Alexandre

Subject: Lotus Password and Windows Active directory

Most likely you will want to create a Policy Document for your domain. In that you will want a security setting that specifies a lower security level for the password changes. The Domino password quality scale would need to be set accordingly. Alternately, not knowing how your Windows scale is, you may just want to force the Notes passwords to be a certain length and not use the PQS.

Chris

Subject: RE: Lotus Password and Windows Active directory

Thank you for your response.

Fox example, if we want to use the following setting in Windows 2000 domain policy.

“The default strong password in Windows 2000, requires a minimum of 6 chars, and 3 of the following 4 types of character: Lower case; Upper case; Number; “Special” character.”

Can we match it with a Lotus Notes Complexity level?

Thank you,

Alexandre

Subject: RE: Lotus Password and Windows Active directory

There is no equivalent rating in Notes Password Quality to: “The default strong password in Windows 2000, requires a minimum of 6 chars, and 3 of the following 4 types of character: Lower case; Upper case; Number; “Special” character.”.

Notes doesn’t blindly apply a set of contraints to a password; it judges passwords individually and rates them in terms of their entropy – roughly speaking, how hard they would be to guess. For example, “Password1” is nine characters long and contains uppercase, lowercase, and a number, but it’s still a lousy password that any cracking program would try in the first few fractions of a second. Notes would probably only give “Password1” a strength of 3 or 4, even though it apparently qualifies as a “default strong password” under W2000. Similarly, Notes would rate a 30-character long password consisting of randomly chosen lowercase characters that didn’t contain any words as very strong, even though W2000 might reject it for not containing enough character type variety.

dave