0
votes
0answers
192 views

Pam password policy not working for root

I was following this guide (http://xmodulo.com/2013/12/set-password-policy-linux.html) for setting up pam and password for policy for CentOS. Everything works great except the root or any user's ...
1
vote
1answer
211 views

Changing Password expiry date for limited users in Domain

I have 50 users in my domain. But i have to set password expiry days for 90 for only 10 users. How can i do it. How can this be done without affecting any other users Password Policy.
1
vote
1answer
228 views

Why warn users weeks before their passwords expire? [closed]

At my workplace (and I am told many others), several password-requiring systems warn users every day during the two week period before their passwords expire. The warning consists of a dialog box that ...
0
votes
3answers
2k views

Windows Server 2008 AutoLogin Permission on WinLogon Key

I have a windows Server 2008 that need to automatically autologin on startup, i've added this registry key : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\DefaultUserName ...
2
votes
4answers
125 views

How can I revoke access for a user across different systems?

We are going to let one of our sysadmins go in a few weeks. He has access to our entire infrastructure, so we'll have to reset the passwords on everything. This is going to be really time consuming ...
12
votes
5answers
3k views

How often do you change your administrator/root password?

I have a bad habit of rarely changing the administrator password in my domain. The passwords I do use are pretty good but I want to be more consistent on this. What do you think is a good frequency? ...
7
votes
6answers
822 views

How do you manage passwords for a large number of servers?

Given how important it is to have different passwords for different systems, how does a data centre with thousands of servers manage? I'm only managing a few dozen machines at the moment, but the ...
4
votes
1answer
153 views

Remembering Passwords

I stumbled across this question earlier and it got me thinking. Everyone's encountered systems that require you change your password every x days and not reuse any of your last y passwords. This ...
4
votes
8answers
1k views

Is it legal to save user passwords in clear text? How can I convince my client to avoid it? [closed]

Is it legal (US and EU) to store user passwords in clear text (i.e. of a website)? Is there any law about how passwords should be stored? I have a client that wishes to have passwords stored in the ...
0
votes
3answers
6k views

How to disable “Password Never Expires” on multiple users (Windows Server 2003)

It seems that a lot of my users have the "Password Never Expires" box checked. And that bypasses my password policy. I have all my users under one OU folder, with a lot of subfolders of course. And ...
2
votes
1answer
2k views

Changing Windows Server 2008 password policy for a standalone server

How do you disable the password complexity requirements on a W2k8 server that is not part of an Active Directory? I'd like to find the method that requires the fewest clicks and if there is any way ...
10
votes
17answers
1k views

What are the arguments for and against a network policy where the sys admin knows users passwords?

I'd like to know pros and cons.. reasons for and against the idea of sys admin’s maintaining user account lists with passwords.. and additionally not allowing those users to change their passwords. I ...
17
votes
9answers
1k views

User password age/complexity policy

Has anyone got any resources for determining a reasonable password policy for my users? My personal leaning is to ratchet up password complexity and allow them to change them less often as a kind of ...