LA3Train Wiki

Password Guidelines

Page history last edited by Robert Jones 1 yr ago

JCLC Staff Password Guidelines

Full Time Employee (FTE)

All FTE’s will be required to have a Personal Network Account.

Usernames will consist of the employees first & middle initials along with their full last name.

Passwords must meet the following complexity:

1) Must be at least 8 characters long.

2) Must include at least 1 uppercase letter.

3) Must include at least 1 Base 10 Digit (0-9).

Passwords can also include Non-Alphanumeric characters such as (!, $, #, @, or %).

(Suggestion)

A “simple” method for producing a “strong” password that is “easy” to remember and also easy to manage is to NOT choose a PASSWORD, but rather choose a PASSPHRASE.

A Passphrase is a string of words, a sentence, or a phrase that is personal and only means something to you. You can then use a letter or a combination of letters from each word in the phrase to comprise your personal password.

Example: I do not like green onions in my salad.

I can take the first letter of each word and make the password:

(1 D N L G 0 1 M S)

Notice that this password meets the complexity standards because I changed the letters “I” to the number “1” and the letter “O” to the number “0”.

When you are required to change the password, you can simply change one or more of the characters and still maintain the same phrase.

Changes for Existing Staff

Any FTE that does not currently have a personal network account, or is using a departmental “Shared” account must submit (via Track-It! or Email) the following info:

1) Full Name / Title

2) Location / Department

3) Phone #

When new network accounts are created, they will be given this generic password:

“P@ssw0rd” (Yes, that’s a capital P; Yes, that’s a Zero and do not include the quotes)

You will be required to change this password the first time you log in with your new account.

Passwords will be enforced by Group Policy within Active Directory and will apply to ALL JCLC Member Libraries that are within the JCLC.ORG domain.

In addition to the above mentioned parameters, this policy will also include:

Password History

This determines the number of unique new passwords a user must use before an old password can be reused. This value is 10.

Maximum Password Age

This determines how many days a password can be used before the user is required to change it. This value is 182.

Minimum Password Age

This determines how many days a user must keep new passwords before they can change them. This setting works with Password History so that users cannot quickly reset their passwords the required number of times and then change back to their old passwords. This value is 2.

--- NOTE ---

The password may be rejected if it contains three or more consecutive characters from the account owners’ full name.

Departmental “Shared” Accounts

Locations that have computers that are shared by several staff members, such as Circulation or any other common function within a department, will be assigned a Shared User Account.

The username will reflect the primary function of the PC or the department that the PC serves.

The passwords for these machines will adhere to the same set of complexities that applies to regular staff, however, they will be assigned to the user account by the local CSL or an IT Administrator.