Account policies
The main Account Policies page allows you to establish security criteria and policies for user accounts and passwords and to set default values. It also provides the ability to automatically disable or delete inactive user accounts, and to receive warning notification prior to this occurrence.
Account Policies tab
Minimum password length
Used by the password strength checker. Requires user-entered passwords to be at least this length.
Require numeric character
Used by the password strength checker. Requires user-entered passwords to contain at least one numeric character.
Require special character
Used by the password strength checker. A non-alpha or non-numeric characters is required to be present within the password if checked.
Prohibit repeating characters
Used by the password strength checker. Adjacent repeating characters are prohibited if this control is checked.
Prohibit dictionary words
Used by the password strength checker. The password is stripped of numeric and special characters and checked against a dictionary file.
Prevent reuse of previous passwords
Maintain a limited history of old passwords and prevent attempts to use one of them.
Passwords expire after: nn days
The number of days before a password must be changed. After this number of days, the user may not log in until the password has been changed.
Lockout users after: nn invalid attempts
The number of times a user may enter incorrect password for a valid userid before the account is disabled and the user is locked out.
Disable account: The user is locked out unless an MVCM administrator manually reenables the user.
Unlock user after n minutes: The account is automatically re-enabled after the specified time elapses.
Perform automatic account management
Checking this enables a daily check by the server for inactive user accounts and acting as defined by the remaining options:
Disable users after: nn inactive days
The number of days an account may remain idle before it is automatically disabled.
Delete users after: nn inactive days
The number of days an account may remain idle before it is automatically deleted.
Warn about deleting after nn inactive days
The number of days an account may remain idle before an e-mail is generated.
Send e-mail to:
E-mail address(es) to receive notification. If more than one address is needed, enter a comma separated list of e-mail addresses to send notification.
SMTP Server:
The mail server used for delivering e-mails.
Send Test e-mail
Click to send a test e-mail to all addresses on the list.
Apply
Saves the configuration.