Setting passwords to expire in 30 days should also be used with all the other criteria that stops users from cycling through several passwords back to their original one. Be sure that the system remembers sereral old passwords and bans their re-use, make sure the password length is 8 or more, make the user log on to change the passwords, lock out after too many wrong tries (3-5) in given amount of time, etc. Other wise the smart users will quickly learn they can log on, chang the password, then change it again back to the old one and the whole purpose is defeated.
Make sure you give the users help in how to create a good password. I wrote an article showing that Igd6B@n is a great password and easy to remember. I go drink 6 Beers at night. Create a sentence that you can relate to, and then make it a password. M1DiaDP. My one Dog is a Doberman Pincher. Easy once you know the trick. A friend who is an admin for another company created a password policy that was a nightmare, and he didn't train his people. Got a lot of grief. Good luck. (I don't drink 6 beers at night by the way.)
Glen A. Johnson
"Fall seven times, stand up eight."
Proverb
Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.