Password Restrictions

Allow User to Change Password
Specifies whether the user is allowed to change his or her login password. The setting of this check box is stored as the Password Allow Change property of the User object.

Require a Password
Specifies whether to prompt the user for a password during login. To cause the user to be prompted for a password, select this check box and enter the minimum number of characters required for the password in the Minimum Password Length field. You can enter a number from 1 to 128 or accept the default of 5.

The setting of this check box is stored as the Password Required property of the User object, and the minimum password length is stored as the Password Minimum Length property.

Force Periodic Password Changes
Specifies whether to prompt the user to change his or her login password periodically. To cause the user to be prompted to change his or her login password periodically, select this check box and fill in the next two fields.

Days Between Forced Changes
Specifies the number of days the user is allowed to use a password before it expires. You can enter a number from 1 to 365. The setting of the Force Periodic Password Changes check box and the contents of this field are stored as the Password Expiration Interval property of the User object.
Date Password Expires
Specifies the date and time the user's current password expires. Click the calendar icon next to this field to set an expiration date and time. Once the user changes the current password, and each time the user changes his or her password thereafter, the system resets the expiration date forward the number of days specified in the Days Between Forced Changes field. The expiration date is stored as the Password Expiration Time property of the User object.

Require Unique Passwords
Specifies whether to prevent the user from reusing any of his or her last eight login passwords. The setting of this check box is stored in the Password Unique Required property of the User object.

Limit Grace Logins
Specifies whether to limit the number of grace logins the user is allowed. A grace login means the user can log in with an expired password. To limit the number of grace logins, select this check box and fill in the next two fields.

Grace Logins Allowed
Specifies the number of grace logins the user is allowed. You can enter a number from 1 to 200 or accept the default of 6. The setting of the Limit Grace Logins check box and the contents of this field are stored as the Login Grace Limit property of the User object.
Remaining Grace Logins
Specifies the number of grace logins the user has left. Each time the user uses a grace login, the system decrements this value. Each time the user changes his or her login password, the system resets this value to the number of grace logins allowed.

If the user has exhausted his or her grace logins and you want to grant a few more grace logins (this time only), or if you want to set a different number of grace logins for the next time the user's login password expires, enter a number in this field. The number of grace logins remaining is stored as the Login Grace Remaining property of the User object.

Change Password
Click this button to set the user's login password. It displays the Create Authentication Secrets or Modify Authentication Secrets dialog box. Once you set the password and click OK in the dialog box, you are returned to the Properties dialog box and you can't undo the password change by canceling the Properties dialog box.

This button is disabled unless you have the Supervisor or Write right to the Password Management property or the ACL property of this User object.


Related Topics

Web Links