SECURING
Information protection and data privacy laws include specific requirements for the selection of secure passwords for identity verification. To help users comply with these laws, HCL Domino® includes the ability to implement password restrictions on a policy basis. Administrators can enforce password requirements that will fit almost any set of corporate or government security requirements.
Custom password policies are created and applied through a Security Policy Settings document.
Through a custom password policy, administrators can restrict or prohibit the use of the following in user passwords:
If the policy has been applied to a new user, the user must first authenticate with the server in order to be prompted to change password first use.
Custom password policies are downloaded to the Notes® ID file when a user first authenticates to the home server. Once stored in the ID file, the policy settings will apply to the user's password the next time a user logs in to the HCL Notes client, and the user will be prompted to change the password upon first use.
If the user does not change the password to conform to the policy, or cancels out of the Change Password dialog, the user receives an error message stating that the password does not meet policy requirements, and the Notes client shuts down.
Custom password policies do not have many validation checks. It is possible for an administrator to create a policy such that no password will ever meet the requirements (for example, maximum length = 4, minimum password quality = 8 ). Administrators need to make sure that the password policies they implement make sense and can be implemented.
Note: Even if you establish a customized password policy, you must still enable Check passwords on Notes IDs in the server document in order for Domino to check password history.
Restrictions
Custom password policy settings will not:
Related tasks Creating a security policy settings document