Skip to main content

Password Rule and Policy

The Password Rules and Policy to specify the rules for things like password length, password expiration period and other related settings. These should be set to values defined in your organization’s password policy.

Use the this submenu to set the password rule and policy parameters.

Submenu itemDescription
Password Rule and Policy
Minimum password lengthInput a value from 8 to 20. The minimum number of characters that can be used to specify a valid password.
Password expiration periodInput a value from 0 to 365. The number of days a password may be used before it must be changed. If set to 0 the passwords never expire.
Password expiration warning periodInput a value from 0 to 365. The number of days before receiving a warning about the expiration of the password. If set to 0 the passwords never warned.
Minimum password change intervalInput a value from 0 to 240. The number of hours that must elapse before changing a password. The value specified for this setting cannot exceed the value specified for the “Password expiration period”. If set to 0 the passwords may be changed immediately.
Minimum password reuse cycleInput a value from 0 to 10. The minimum number of times a unique password must be set before reusing a previous password. If set to 0 the passwords may be reused immediately.
Maximum number of login failuresInput a value from 0 to 100. The number of login attempts that can be made with an incorrect password before the user account is locked out. The account is locked out for the time specified in “Lockout period after maximum login failures”. If set to 0 accounts are never locked. The failed login counter is reset to zero after a successful login.
Lockout period after maximum login failuresInput a value from 0 to 2880. The number of minutes that must pass before a locked out user can attempt to login. Entering a valid password does not unlock the account during the lockout period. If set to 0 the accounts will not be locked out even if the “Maximum number of login failures” is exceeded.