IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
- Require unique passwords
When the password history is active (require unique passwords), the last
nine passwords of a user account are compared with the newly entered
password, and if a match is found, the new password is rejected by the
Netware server. This enforces the use new passwords when a password
expired. This option should always remain active.
- Limit grace logins
Grace logins are those which may be performed following the expiry of a
password. The number of grace logins should always be limited through
the use of this option.
- Grace logins allowed
The number of permissible grace logins should be set to a value of 1, so
that when a password expires, it needs to be changed immediately by the
user.
- Set password after create
This option should always remain active. It automatically prompts the
administrator to enter a password during the creation of a new user
account. This prevents the creation of user accounts which are freely
accessible on a temporary basis.
Login time restrictions
Menu diagram: Netware Administrator Menu “Template: User template /
Login time restrictions”
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000