Password Requirements

Your password must meet these requirements

Passwords are case sensitive, usernames are not.

Complexity requirements

Passwords cannot contain the user's account name

Passwords cannot contain the users first or last name

Passwords must contain characters from at least 3 of the following 4 categories:

	Upper case letters
	Lower case letters
	Numbers
	Special characters (symbols such as $, %, &, *, @, !, #, +, =)

Password history

Your new password cannot be the same (or essentially the same) as any of your previous 8 passwords. Recent improvements to password complexity requirements algorithms disallow minor changes such as incrementing a number used as the last character (Bandito1, Bandito2, Bandito3, etc.).

Maximum password age

42 is the number of days a user can access a password before he or she is required to change it. This option may be turned on or off for particular users.

Minimum password age

One (1) is the number of days a user must keep a password before he or she can change it.

Minimum password length

8 is the minimum number of characters required in a password. Passwords can be up to 128 characters.

Account lockout policy

10 invalid logon attempts will result in account lockout for a duration of 5 minutes.

Example

For example, "77shelley" (without the quote marks) does not meet complexity requirements, but "77shelley**", or "77Shelley" or "77Shelley**" does, provided the user's full name or account name does not include Shelley.