General discussion

Locked

I am trying to implent stricter password

By kneighbor ·
I am trying to implent stricter passwords? I was thinking of using passprop? ANyone tell me exactly how to use it ir any better idea. Thank s

This conversation is currently closed to new comments.

11 total posts (Page 1 of 2)   01 | 02   Next
| Thread display: Collapse - | Expand +

All Comments

Collapse -

I am trying to implent stricter password

by mpayne In reply to I am trying to implent st ...

I'm not sure just how strict of a password policy you're trying to implement, but in terms of the least expensive and fairly straightforward solution, consider the tool you already have on NT Server: User Manager For Domains. Select Policies, thenAccount, to apply restrictions to all users in your domain. Also, logon hours, etc. can be applied individually to suspect accounts. (which can be time consuming with a lot of user accounts) Hope this is helpful. I'd be glad to discuss it furtherwith you sometime. Mark Payne, MCSE,MCP+I

Collapse -

I am trying to implent stricter password

by kneighbor In reply to I am trying to implent st ...

The question was auto-closed by TechRepublic

Collapse -

I am trying to implent stricter password

by agibbs In reply to I am trying to implent st ...

I don't know much about Passprop, but you can modify the following password attributes with User Manager:

Logon hours
minimum password length
Minimum, maximum password age (i.e. how often passwords are changed)
Password uniqueness (so people won't re-use passwords)
Account lockout after failed logon attempts

These alone are good enough for most situations, however, they aren't fool-proof. For instance, none of these settings will keep people from using "easy" passwords (i.e. "11111" "12345" etc, or using their username as their password)

Collapse -

I am trying to implent stricter password

by kneighbor In reply to I am trying to implent st ...

The question was auto-closed by TechRepublic

Collapse -

I am trying to implent stricter password

by erocm In reply to I am trying to implent st ...

Your NT network is only as secure as its weakest password. NT provides a great utility for controlling passwords called the User Manager. To access this utility go to the Start menu and select Administrative
Tools | User Manager. In the User Manager window select the user or group you want to work with and then go to the Policies menu and choose Account. NT will display an Account Policy dialog box where you can
control the maximum age of a password, its minimum length, and uniqueness. By limiting the life of passwords and requiring at least 8 characters (NT allows passwords up to 14 characters) you can reduce your system's susceptibility to brute-force attacks. You can test how your system holds up under a brute-force attack with a password cracking utility called L0phtCrack. This utility works by grabbing passwords as they move across a network or by extracting the
NT passwords from the system registry or an emergency repair disk. L0phtCrack uses a dictionary to guess passwords but also attacks th

Collapse -

I am trying to implent stricter password

by kneighbor In reply to I am trying to implent st ...

The question was auto-closed by TechRepublic

Collapse -

I am trying to implent stricter password

by simon.wellborne In reply to I am trying to implent st ...

Hello again

I use passflt on our NT servers here. It works a treat and ensures people don't use simple passwords which the standard settings in User Manager will not enforce.

I have not used passprop, so cannot comment on it or it's effectiveness.

There is an article (or two or three :-) in TechNet.

As mentioned, passflt forces our users to make use of strong passwords, so unless you want to spend $$ on a commerical password filter - it's the next best thing.

Hope this helps.

Collapse -

I am trying to implent stricter password

by kneighbor In reply to I am trying to implent st ...

The question was auto-closed by TechRepublic

Collapse -

I am trying to implent stricter password

by guy In reply to I am trying to implent st ...

Passfilt is the answer here.
The dll comes when you install SP4 or later, then you need to make a change to the registry. The change is described in Technet.
HKLM\CCS\control\LSA\notification packages(You see FPNWCLINT you know you have found it)add Passfilt
Passprop is useful to stop the Administrator account from loging on accross the network.

Collapse -

I am trying to implent stricter password

by kneighbor In reply to I am trying to implent st ...

The question was auto-closed by TechRepublic

Back to Windows Forum
11 total posts (Page 1 of 2)   01 | 02   Next

Related Discussions

Related Forums