ActiveDirectory

From UMIACS
Revision as of 05:30, 1 April 2009 by Derek (talk | contribs)
Jump to navigation Jump to search

Windows Authentication is based on Kerberos standard authentication but with some extensions. Your UMIACS Kerberos5 account is different from your ActiveDirectory account and unless you set your passwords manually they will not be the same.

Your ActiveDirectory authentication is used in a variety of different places,

Your account might be shown in two ways,

  • PC\username
  • username@pc.umiacs.umd.edu

depending on the application you are using.

Updating your ActiveDirectory Password

If you need to update your ActiveDirectory password you need to access the Windows Security portion of a pc.umiacs.umd.edu domain desktop or server. This can be found in two ways,

  • If you are physically sitting at the host you can press the hardware control sequence all at once
  <CTRL><ALT><DELETE> 
  • If you are logging in remotely you can access Windows Security by going to
   Start->Settings->Windows Security... 

You should get a screen that looks like this,

File:WindowsSecurity.png

You can choose Change Password to update your ActiveDirectory authentication.

Password Policies

We have the following policies in regards to our ActiveDirectory passwords,

  • Minimum Password Length : 8 Characters

This requires that your password is a minimum of 8 characters (it can have more just not less)

  • Minimum Character Classes : 2 Character Classes

Requires that a password have more than 2 character classes they include: lower-case letters, upper-case letters, digits and punctuation.

Password Security

ActiveDirectory Kerberos security depends on the security of your password. Although Kerberos can make secure access to services convenient, it is still your responsibility to secure your password. Please try to choose a strong password and use secure protocols