Password Policy Enforcer Administrator's Guide

<?xml version="1.0" encoding="ISO-8859-1"?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <meta http-equiv="X-UA-Compatible" content="IE=EmulateIE7" /> <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" /> <meta http-equiv="Content-Style-Type" content="text/css" /> <meta name="keywords" content="password policy enforcer anixis windows password policy passfilt password filter Policy Properties" /> <meta name="description" content="Password Policy Enforcer Policy Properties." /> <title>Password Policy Enforcer Policy Properties</title> <link rel="StyleSheet" href="document.css" type="text/css" media="all" /> <link rel="StyleSheet" href="catalog.css" type="text/css" media="all" /> <link rel="first" title="First" href="TOC.html" /> <link rel="last" title="Last" href="License_Agreement.html" /> <link rel="previous" title="Previous" href="Deleting_a_Policy.html" /> <link rel="next" title="Next" href="Assigning_Policies_to_Users.html" /> </head> <body> <table id="SummaryNotReq1" width="220" border="0" align="right" cellpadding="0" cellspacing="0"> <tr> <td align="right"> <a accesskey="4" href="Deleting_a_Policy.html"><img id="LongDescNotReq1" src="images/prev.gif" border="0" alt="Previous" /></a><a accesskey="5" href="Assigning_Policies_to_Users.html"><img id="LongDescNotReq2" src="images/next.gif" border="0" alt="Next" /></a><br /><br /> <span><a href="http://www.anixis.com/" style="font-family: Arial, Verdana, Helvetica, sans-serif; font-weight: bold; color: #007577;" target="_top">ANIXIS Web Site</a></span> </td> </tr> </table> <p> <a href="http://www.anixis.com/products/ppe/" target="_top"><img id="LongDescNotReq3" src="images/logo.gif" width="174" height="46" border="0" alt="Password Policy Enforcer" /></a> </p> <hr align="left" /> <blockquote> <a name="wp9000423"> </a><h2 class="pHeading2"> Policy Properties </h2> <a name="wp9000424"> </a><p class="pBody"> To open the Policy Properties page: </p> <div class="pSmartList1"><ol type="1" class="pSmartList1"> <a name="wp9000425"> </a><div class="pSmartList1"><li>Click the <span style="font-weight: bold">Policies</span> item to display the <a href="Management_Console_Views.html#wp9000335">Policies view</a>.</li></div> <a name="wp9000426"> </a><div class="pSmartList1"><li>Click the desired policy in the right pane of the management console.</li></div> <a name="wp9000427"> </a><div class="pSmartList1"><li>Click <span style="font-weight: bold">Properties</span> in the right pane of the management console.</li></div> <a name="wp9000428"> </a><p class="pBodyRelative"> <img src="images/Password_Policy_Enforcer_33.jpg" height="297" width="255" id="wp3000024" border="0" hspace="0" vspace="0"/> </p> </ol></div> <a name="wp9000429"> </a><p class="pBody"> Each PPE policy must have a unique name. To change the name of this policy, type a new name in the text box beside the policy icon. </p> <a name="wp9000430"> </a><p class="pBody"> PPE only enforces enabled policies. Select the <span style="font-weight: bold">Enabled</span> check box if PPE should enforce this policy, or deselect it to disable the policy. </p> <hr width="100%" align="left" size="1" /> <table width="95%" border="0" cellspacing="0"> <tr> <td width="50" valign="top"> <img src="images/information.gif" width="32" height="32" /> </td> <td> <a name="wp9000431"> </a><p class="pInformation"> PPE may update a user's password history even if the policy assigned to the user is disabled. See the <a href="History_Rule.html">History rule</a> for more information. </p> </td> </tr> </table> <hr width="100%" align="left" size="1" /> <a name="wp9000432"> </a><p class="pBody"> The <span style="font-weight: bold">Reject passwords that do not comply with</span> drop-down list specifies the required compliance level for this policy. The default value (all the rules) requires users to comply with all enabled rules. Choose an alternative option if PPE should enforce a more lenient password policy. When setting the compliance level, consider that some rules may be disabled when a user enters a <a href="Passphrases.html">passphrase</a>. The <a href="Minimum_Age_Rule.html">Minimum Age</a> and <a href="Maximum_Age_Rule.html">Maximum Age</a> rules are excluded from compliance level calculations. </p> <a name="wp9000433"> </a><p class="pBody"> PPE can start a password synchronization application or script whenever a user successfully changes their password. Enter the full path to the executable in the <span style="font-weight: bold">Execute this program when a password is changed</span> text box. Every domain controller should have a local copy of the program, and only authorized users should have access to it, or any of its components. </p> <a name="wp9000434"> </a><p class="pBody"> The user logon name and new password are sent to the program via the command line. For example, this batch file records the user's logon name and new password in a text file: </p> <div class="pPreformatted"><pre class="pPreformatted"> echo Username: %1 >> c:\passwords.txt echo Password: %2 >> c:\passwords.txt<a name="wp9000435"> </a> </pre></div> <hr width="100%" align="left" size="1" /> <table width="95%" border="0" cellspacing="0"> <tr> <td width="50" valign="top"> <img src="images/information.gif" width="32" height="32" /> </td> <td> <a name="wp9000436"> </a><p class="pInformation"> Send an e-mail to <a href="mailto:support@anixis.com">support@anixis.com</a> if you are concerned that this feature could be used to capture user passwords. We can help you to securely configure, or permanently disable this feature. </p> </td> </tr> </table> <hr width="100%" align="left" size="1" /> <a name="wp9000437"> </a><p class="pBody"> Record any comments or configuration notes about this policy in the <span style="font-weight: bold">Notes</span> text box. </p> <a name="wp9000438"> </a><p class="pBody"> Click the <span style="font-weight: bold">Assigned To</span> tab to <a href="Assigning_Policies_to_Users.html">assign</a> this policy to users, groups, or containers. </p> <a name="wp9000439"> </a><p class="pBody"> Click the <span style="font-weight: bold">Passphrases</span> tab to specify which rules should be disabled when a user enters a <a href="Passphrases.html">passphrase</a>. </p> <a name="wp9000440"> </a><p class="pBody"> Click the <span style="font-weight: bold">Messages</span> tab to customize the Password Policy Client <a href="Customizing_Message_Templates.html">message templates</a> for this policy. </p> </blockquote> <hr /> <table id="SummaryNotReq2" align="right" border="0" cellspacing="0" cellpadding="0"> <tr> <td align="right"> <span style="font-family: Arial, Verdana, Helvetica, sans-serif; font-size: 11px"> © Copyright 1998 - 2009 <a href="http://www.anixis.com/" target="_top">ANIXIS</a>.<br />All rights reserved. </span> </td> </tr> </table> <table id="SummaryNotReq3" width="220" border="0" cellpadding="0" cellspacing="0"> <tr> <td> <a accesskey="4" href="Deleting_a_Policy.html"><img id="LongDescNotReq4" src="images/prev.gif" border="0" alt="Previous" /></a><a accesskey="5" href="Assigning_Policies_to_Users.html"><img id="LongDescNotReq5" src="images/next.gif" border="0" alt="Next" /></a> </td> </tr> </table> </body> </html>