Educause Security Discussion mailing list archives

Re: Password reset/expiration policies


From: "Childs, Aaron" <aaron () WESTFIELD MA EDU>
Date: Wed, 8 Feb 2012 22:52:03 +0000

We have a 90 day password life enforced by AD GPO.  The GPO is applied to everyone on campus.
Aaron
[Description: Description: Description: Description: logo-email]

Aaron Childs, CCNA
Associate Director, Networking
Information Technology
www.westfield.ma.edu/it<http://www.westfield.ma.edu/it>
Please Note: new e-mail address - aaron () westfield ma edu<mailto:aaron () westfield ma edu>

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Louis 
APONTE
Sent: Wednesday, February 08, 2012 3:50 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Password reset/expiration policies

Hi

How often do you force password changes at your institutions for central credentials?  Do you have different policies 
for different groups?  Are they enforced by technology or just "suggested best practices"?

Louis Aponte
Weber State University
Ogden, Utah
Desktop Security


Current thread: