Random Password Policy for Administrators

To access this page

In the Symantec Management Console, on the Home menu, click Arellia > Local Security
In the left pane, select Policies > Windows > Local User Tasks > Random Password Policy for Administrators

Item	Description
Enable	Enable the policy using the On/Off toggle.
Name	Password Policy name.
Description	Password Policy description.
User Account	Select the type of user account the policy applies to: Standard Account - Select one from the drop-down list. Named Account - Enter one in the field provided.
Change Interval	Select the interval between password changes. Enter the time and select the format in Seconds, Minutes, Hours, or Days in the drop-down list.
Password Length	Enter the number of characters to be used for the randomly generated password.
Use Characters	Select the password options to be considered for password generation from: Use Uppercase Use Lowercase Use Numbers Use Symbols
Log password at server before change	Select to enable communication between the Local Security Agent and the Notification Server before the password is changed. This means both the password change request and the change are logged before the change actually occurs. An NSE is then generated which ensures the password change request and subsequent change are never lost.
Applied To	Click to open the Collection Selector dialog to select the collection you want the policy to apply to. We don't recommend changing the default collection.
Save Changes	Click to save changes

To create a new Random Password Policy

In the Symantec Management Console, on the Home menu, click Arellia > Local Security
In the left pane, select Policies > Windows > Local User Tasks > Random Password Policy for Administrators
Right-click Random Password Policy for Administrators and select Clone in the pop-up menu.
In the Clone Item dialog, enter a policy name and select OK.
In the right pane, enable the policy using the on/off toggle and enter a policy description in the appropriate field.
Click Apply to: to open the Collection Selector dialog and select the collection you want the policy to apply to.
Configure the Change Interval, the Password Length, and the Use Characters as required.
(Optional) select Log password at server before change.
Click Save changes.

IMPORTANT
For every attempted password change, the Local Security Agent verifies whether there is a service using that account. If one is detected, the password change is not performed and an event is logged at the server. The User password change failure report lists all failed password changes.