Random password policy for administrators

To access this page:

Go to Arellia Security Manager and click on the Policies tab
Select Policies > Arellia > Local Security > Windows > Local User Tasks > Random Password Policy for Administrators

Item	Description
Enable	Enable the policy using the On/Off toggle.
Name	Password Policy name.
Description	Password Policy description.
User account	Select the type of user account the policy applies to: Standard Account - Select one from the drop-down list. Named Account - Enter one in the field provided.
Change interval	Select the interval between password changes. Enter the time and select the format in Seconds, Minutes, Hours, or Days in the drop-down list.
Password length	Enter the number of characters to be used for the randomly generated password.
Use Characters	Select the password options to be considered for password generation from: Use Uppercase Use Lowercase Use Numbers Use Symbols
Log password at server before change	Select to enable communication between the Local Security Agent and the Notification Server before the password is changed. This means both the password change request and the change are logged before the change actually occurs. An NSE is then generated which ensures the password change request and subsequent change are never lost.
Apply To	Click to open the Collection Selector dialog to select the collection you want the policy to apply to. We don't recommend changing the default collection.
Save	Click to save changes

To create a new Random Password Policy

Go to Arellia Security Manager and click on the Policies tab
Select Policies > Arellia > Local Security > Windows > Local User Tasks
Right-click Random Password Policy for Administrators and select Clone in the pop-up menu
In the Clone Item dialog, enter a policy name and select OK
In the right pane, enable the policy using the on/off toggle and enter a policy description in the appropriate field
Click Apply To to open the Select Targets dialog box and select the collection you want the policy to apply to
Configure the Change Interval, the Password Length, and the Use Characters as required
(Optional) select Log password at server before change
Click Save

IMPORTANT
For every attempted password change, the Local Security Agent verifies whether there is a service using that account. If one is detected, the password change is not performed and an event is logged at the server. The User password change failure report lists all failed password changes.