PWM password requirements are incorrect

283 views
Skip to first unread message

jp1...@gmail.com

unread,
Feb 18, 2015, 10:05:59 AM2/18/15
to pwm-g...@googlegroups.com
PWM seems to ?randomly? claim that my AD with password complexity set up has the following password complexity requirements:


Password is case sensitive.
Must be at least 8 characters long.

While this is true - it is incomplete. The passwords must also contain 3 of 4 character classes, i.e. 3 of Upper Case, Lower Case, numeric, symbols. Users following the above may believe that a password of, say:

12345678

will meet the requirements and be confused why it is always rejected by the domain.

I was able to add my own text to the Password guide - but that is hidden by default, and users don't see it.

How do I put my own text in place of the bullet points above?

user.admi...@psd150.org

unread,
Feb 26, 2015, 9:23:40 AM2/26/15
to pwm-g...@googlegroups.com, jp1...@gmail.com
In Display Text section of configuration, modify the "Display_ChangePassword" field, and you can include html tags. I also set my "Password Policy" default policy to match my AD requirements. So when my users are on the page where they enter their new password, they see my custom text, plus it shows a bullet list of the password complexity requirements. But I think the "Display_ChangePassword field is what you want to change to make custom text visible to users while they change their password.



Here is my Display_ChangePassword field data:
Please change your password. Keep your new password secure. After you type your new password, click the Change Password button. If you must write it down, be sure to keep it in a safe place.<br><br><b>It may take up to 5 minutes for the password change to sync among the various online sites that use the Windows password, including email.<br><br>Also, please note that Windows passwords are case-sensitive, so if you use upper/lower case in your password, be sure to type your email password with the same upper/lower case.</b><br><br> Your new password must meet the following requirements (no spaces in password allowed):
Reply all
Reply to author
Forward
0 new messages