Pretty simple. Create a security policy, and on the Password Management
tab, password management Basics subtab, choose "Update Internet Password
When Notes Client Password Changes" to YES
We also set "Allow Users to Change Internet Password over HTTP" to NO, as
I don't think it syncs the other way around.
I also set the password expiration to be slightly longer than the Windows
expiration, as we use the "Login to Notes using the Operating System
Login" checkbox in the client (have to visit every machine!) and set the
custom password complexity (same policy doc) to be equal to (or slightly
less than) Windows complexity. Then the only expiration that they see is
for Windows, and when they change their Windows password, the Notes and
Notes Internet are all changed at the same time, transparently.
This policy doc is also the place the set "Check password on Notes id
file", and that will ignore the setting on the user doc (even if it says
"no", the policy will override)
And the place to set ECL enforcement.
We have been using this for over a year, and yes, the users still mess it
up, but in my opinion it has greatly simplified our lives, especially on
Monday mornings.
The OU based policies allow us to have a separate settings for our field
says people who never come into the office (are setup on the Windows
Domain, but never contact it, and therefore don't get Windows Policies
refreshed or contacted for password changes) to follow the more lax
policy.
I could write on our overall policy setup, but that would take a bit more
time than I have this morning.
Now if only I had time to work on OS/400 single sign-on. I have the
kerberos settings setup and tested, but need to setup the EIM.
===============================================
Tom Kreimer
Network Manager
Buckhorn Inc, Milford OH
Apparently some users, me included, do not have their internet password
set to sync with their Notes password. How do I set it up so that when
they change their password they stay in sync?
I suspect it has something to do with a new policy, but does anyone have a
technote or some such thing giving a step-by-step?
Rob Berendt
--
Group Dekko Services, LLC
Dept 01.073
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com
midrange.com
