Password Rule And Policy - Lenovo HR650X V2 User Manual

Table 53. User password details
Item
User Password

Password rule and policy

See the table below for the descriptions of options in Password Rule and Policy screen:
Table 54. Password rule and policy details
Item
Minimum Password Length
Password Expiration Period
Password Expiration Warning
Period
Minimum Password Change
Interval
Minimum Password Reuse Cycle
Minimum Number of Login
Failures
Lockout Period after Maximum
Login Failures
Description
Set the user password. The rules are as follows:
• The password can only contain the following characters (no white-space
characters allowed): A-Z, a-z, 0-9,~`!@#$%^&*()-+{}[]|：；" '<>,?/.\_
• Contain at least one letter.
• Contain at least one number.
• Contain at least 2 of the following combinations:
– At least one upper-case letter.
– At least one lower-case letter.
– At least one special character.
• No more than 2 consecutive occurrences of the same character.
• Contain at least 8 characters if doesn't select other value in "Minimum Password
Length" option.
Option
N/A
N/A
N/A
N/A
N/A
N/A
N/A
Description
The minimum number of characters that can be used to
specify a valid password.
The number of days a password may be used before it
must be changed. If set to 0 the passwords will never
expire.
The number of days before receiving a warning about the
expiration of the password. If set to 0 the warning will
never be sent.
The number of hours that must elapse before changing a
password. The value specified for this setting cannot
exceed the value specified for the "Password expiration
period". If set to 0 the password may be changed
immediately.
The minimum number of times a unique password must
be set before reusing a previous password. If set to 0 the
passwords may be reused immediately.
The number of login attempts that can be made with an
incorrect password before the user account is locked out.
The account is locked out for the time specified in
"Lockout period after maximum login failures". If set to 0,
the account will never be locked. The failed login counter
is reset to zero after a successful login.
The number of minutes that must pass before a locked
out user can attempt to login. Entering a valid password
does not unlock the account during the lockout period. If
set to 0 the accounts will not be locked out even if the
"Maximum number of login failures" is exceeded.
. 139
Chapter 5 BIOS setup