Description

This policy requires all employees are to have password protection on their mobile devices, tablets, laptops and desktops and any other devices that have access to company systems and information in the course of their employment. All complexity requirements are enforced when passwords are changed or created.

Workflow

• The criteria for Active Directory passwords is outlined below.

  • Enforce password history 5 passwords remembered
  • Maximum password age: 60 days
  • Minimum password age: 1 day
  • Minimum password length: 8 characters

• The password complexity algorithm has the following minimum requirements:

  • Not contain the user's account name or parts of the user's full name that exceed two consecutive characters
  • Be at least 8 characters in length
  • Contain characters from three of the following four categories:
    • English uppercase characters (A through Z)
    • English lowercase characters (a through z)
    • Base 10 digits (0 through 9)
    • Non-alphabetic characters (for example, !, $, #, %)

Your password will expire after 60 days of creation!

To avoid losing your access, please create a simple reoccurring event in Microsoft Outlook every 60 days so that you are reminded to update your password before it will expire. Follow this guide if you are unfamiliar with Outlook.

To change your password:

Windows:

On windows, simply hit "CTRL + ALT + DELETE" then select "Change a Password", this will update your AD password. 

Macs:

On Macs, use the following steps to change your password

You must be on the office network, either wired, i-wlan1 wireless, or VPN to change your password.

General steps:

1. change your password on Active Directory which ITI and email uses (note A below)
2. if you are a remote Windows machine (US-based) or Apple Mac, perhaps change your local password to match (note B below)
3. wait until Outlook on your desktop/laptop complains, then change it there
4. wait until Outlook on your phone complains, then change it in the InTune "Company Portal" application first, then Outlook should be ok but if it is not, change it there as well (note C below for more details)

Note A:

Most Windows machines are "domain joined", meaning if you Ctrl+Alt+Del to change password, it changes both your machine logon password and your AD/email/ITI password all in one step.

However, remote Windows machines (US-based) and Apple Mac's use a local userid to logon to the laptop which is separate from your AD/email/ITI password. You must use this link to change your AD/email/ITI password:

https://ithelp.iglooplatform.com/selfhelp/chgpwd/

Note B for US-based Windows machines and Apple Mac's:

To change the local userid's password (like, if you want the passwords to match), you must use the native OS way to change that. For Windows, use C+A+D then "change password". For Mac's, use the Settings app.

Note C:

If you have Igloo email on your phone, you must change your password in the InTune "Company Portal" application first, with this icon:

Then in Outlook. If either brings up our ADFS signon, use full email address:

For your information: Here are some pictures of how it works.

For a Windows PC (not US-based remote or Mac):

For a Windows US-based remote PC or a Mac: