To protect access to the domain or a computer, every user account should have a strong password. A strong password is a password that provides an effective defense against unauthorized access to a resource. It's important to educate users about the benefits of using strong passwords and to teach them how to create passwords that are actually strong.
Passwords can be up to 127 characters. However, if your network has computers running Microsoft Windows 95, Microsoft Windows 98, or Microsoft Windows Millennium Edition (Windows Me), you should use 70-270 Exama maximum of 14 characters because these operating systems support passwords of up to only 14 characters. A minimum length of seven characters is recommended.
A strong password
* Is at least seven characters long.
* Does not contain a user name, real name, or company name.
* Does not contain a complete dictionary word.
* Is significantly different from previous passwords. Passwords that increment
(Passwordl, Password2, Passwords . MCSE exams ..) are not strong.
* Contains characters from each of the following four groups shown in Table 7-2.
Table 7-2 Strong Password Requirement Groups
An example of a strong password is K*c6mr93lD. Be cautious about using keyboard symbols in passwords if your organization uses several different operating systems.
Password Security
Password security is a real problem and remains a fairly large security hole for many organizations and individuals. You can and should set a password policy at the domain level in order to enforce strong passwords. You'll learn more about this in Chapter 13, "Administering Security with Group Policy." You should also consider using a free test questions password auditing tool in order to monitor your network for weak passwords. There are several password auditing tools available. Probably the most popular password auditing tool for computers running Microsoft Windows is LOphtCrack from ©Stake, which can be found at http://www.atstake.com/.
ไม่มีความคิดเห็น:
แสดงความคิดเห็น