Setting password and account security policies on user accounts

You can enhance password and account security on all user accounts in the Access Manager perspective of Management Console.

Use the Access Server Options dialog box to perform the following actions:

Set a complex password requirement: Enhances password security by enabling users to specify a complex password when logging into Management Console.
Enforce password history: Enables system administrators to enhance security by ensuring that old passwords are not continually reused. For this policy to be effective, do not let users change their password immediately after setting a new one. You can control this by setting the minimum age of the password.
Enforce a password expiry policy: Enables system administrators to enhance security by ensuring that new passwords are created and associated with user accounts.
Lock accounts after a number of failed login attempts: Enables a three strikes login policy which is used to prevent computer password attacks. The policy creates a condition where a user will be locked out of their account after a number of attempts. By default, this setting is set to 3 login attempts.
Enforce an account expiry after new account creation: Enhances account security by forcing users to change their passwords when a new account is created for them.
Display the number of failed login attempts: Enables users to track the number of failed login attempts before they get locked out of the account.
Display the last successful login: Enables users to track their last successful login.

Note: To be able to work in the Access Manager perspective, you must be a system administrator that has the privilege to manage datastores and user accounts.