Description

This policy requires all employees are to have password protection on their mobile devices, tablets, laptops and desktops and any other devices that have access to company systems and information in the course of their employment. All complexity requirements are enforced when passwords are changed or created.

Workflow

The criteria for Active Directory desktop/laptop passwords is outlined below.

• Enforce password history 3 passwords remembered.
• Maximum password age: 60 days.
• Minimum password age: 1 day.
• Minimum password length: 6 characters.

The password complexity algorithm has the following minimum requirements:

• Not contain the user's account name or parts of the user's full name that exceed two consecutive characters
• Be at least six characters in length
• Contain characters from three of the following four categories:
  • English uppercase characters (A through Z)
  • English lowercase characters (a through z)
  • Base 10 digits (0 through 9)
  • Non-alphabetic characters (for example, !, $, #, %)