Password complexity policy question

HCL Domino Domino Forum
1

I am looking for info reagrding security policy to enforce password complexity of 4.

My question(s):

If I create a new policy to enforce password complexity, and some users have a password below that complexity, when will the policy force them to make their password more complex?

Does it evaluate their current password and force them to change when AdminP runs?

Or only when they try to change their password at some point in the future?

When their current certification expires?

I WOULD like to have the policy take place as soon as possible and force them to change their password to something more complex as soon as I can.

Thanks,

Jon Wicker

2

Subject: Password complexity policy question

The minimum password strength is only checked when the password is set or changed.

3

Subject: RE: Password complexity policy question

Thanks for the response.Is there a way to force expiration of an ID before the normal expiration date?

I have yet to find much info on Notes.Net or Admin Help.

Thanks,

jon

4

Subject: RE: Password complexity policy question

You can use password checking to cause Notes passwords to expire, and to prevent users from re-using old passwords.

5

Subject: Password complexity policy question

Okay - I have located the Force User to Change Password on Next Logon fields in the persondoc.

Here’s another question… is there a way to log which users are using the same generic password that we set their acct with?

Or - will forcing everyone to change password but allow them to use the SAME password (as long as it is complex enough (as defined by policy) as they had before work?

Thanks,

jon

6

Subject: RE: Password complexity policy question

DUH!!!Sorry - too little caffeine.

That is Set Internet Password at Next Login.

Still searching for answers.

Anyone?

Many Thanks!

jon