Password change procedures

[Dennis Levine <dennis_levine () EMERSON EDU>]

Hi Everyone,
  I'm wondering if I could get some feedback as to how you have your schools procedures set up to change a user's 
password. Not when or how long it should be, ( we already beat that to death in the last thread with the Heartbleed 
bug) I'm talking about do you have a web based user self-portal that allows someone to enter name and ID number, answer 
a security question or two to get to a password change screen if they forgot their password. If so, did you get push 
back because of the security questions that may have been asked such as "pick an address you may have lived at" or 
"what is your mother's maiden name" etc. and all the wonderful problems that come with FERPA or PII info? Do you do it 
another way?

Thanks,
Dennis Levine

Dennis Levine | Network and Security Administrator | 120 Boylston Street  Boston, MA  02116-4624 | (617) 824-8972 | 
Dennis_Levine () emerson edu<mailto:Dennis_Levine () emerson edu> | www.emerson.edu
[emerson]