Domain Password Policy Enhancements FAQ

INCLUDES:

Password Policy FAQs
SSPR Portal FAQs
Related Documents Links

Enterprise Password Policy Enhancement

We are here for you. If you have a question that does not require IT Sysman Support and is not already answered in this FAQ there's a good chance someone else will have the same question. Simply send an email containing your question to ITPasswordTeam@osisoft.com. We will be happy to help you and your co-workers.

Password Policy FAQs

When will I have to change my password?

Passwords no longer expire on a regular frequency. In the event you want to change your password, you can use the Self-Service Password Reset (SSPR) portal to reset your password - but REMEMBER: You must Register with the SSPR before you need to use it!

What's a good rule of thumb for creating passwords that enhance OSIsoft security?

Using passphrases instead of passwords is an excellent approach. Remembering a phrase is much easier than recalling a random, complex password. Complexity can be easily included in your passphrases as well, but is not a requirement. The length of your password (passphrase) will also increase the strength of the password.

> Example Password -> "X2!aZ@<dF" (9 characters with all complexity options used)

> Example Passphrase -> "I Lov3 Pr0p0sal$ (16 characters with complexity and easier to remember)

The longer a password remains unchanged, the longer a malicious actor could retain unauthorized access to systems and information in the event of a password compromise. Multifactor authentication and auditing passwords against known compromised credential databases can mitigate this concern.

Why can't I change my password?

If you just changed your password and decide to change it again you will receive an error. This is due to a security feature that prevents repeated password changes. Only a single change may occur within a 24 hour time period.

Will Service Account passwords be required to change?

At this time Password Policy compliance applies to OSIsoft corporate domain users only.

Self-Service Password Reset (SSPR) FAQs

Is there a Video Demo or User Guide describing how to use the Self Service Password Reset portal?

Yes.
View the brainshark Self Service Password Reset Portal training video here.
The SSPR PDF User Guide is available from a link at the bottom of the Welcome Page on the SSPR portal; or download here.

How can I obtain relevant help?

The SSPR Welcome page is the hub for ALL guidance. It includes links to Password Creation Rules, this FAQ, and the SSPR User Guide (pdf).
IMPORTANT: The Help links on the 'Register in Password Management', 'Change Password', and 'Reset/Unlock Account' pages will launch fixed Microsoft help pages that are not particularly useful. Unfortunately this behavior cannot be changed at this time.

How can I prevent unintended password or application lockouts when I change my password?

Before performing security altering activities you should remember to close applications that periodically need to re-authenticate using your credentials (e.g., Outlook, SharePoint, Skype, OneDrive, etc.). When such auto-connecting applications are left open during a password change they typically run under the old credentials for a time. Eventually they either prompt you for your new credentials, or the continuous logon retries from these open applications (still using your former password) can fail; causing your account to be locked.

Navigation: Why do I land on Microsoft's "Apps" and "Profile" pages?

Certain functions within the portal have fixed Microsoft behaviors which can land on pages that are out of place for our workflow. You should see the "Apps" page when the Registration task successfully completes, and the "Profile" page as the final page that presets in other circumstances. Transitioning back to the SSPR Welcome page is not possible from that point, so simply close the browser tab and just revisit the site if you need to. HINT: It’s a great idea to place a shortcut to the SSPR portal right on your browser’s toolbar or in your favorites, enabling you to quickly revisit the portal if need be.

Navigation: I'm stuck. How to I get back to the SSPR Welcome page? Am I doing something wrong?

Avoid clicking on the “Cancel” button or the “Back” button as you navigate the portal. These two functions have fixed Microsoft behaviors which prevent transitioning back to the SSPR Welcome page. If you accidentally click one of these and find you are stuck in a loop, simply close the browser tab and just revisit the site. HINT: It’s a great idea to place a shortcut to the SSPR portal right on your browser’s toolbar or in your favorites, enabling you to quickly revisit the portal if the need arises.

Can I still change my password like I used to; using the Windows desktop experience?

Yes, you can still change your password as you have in the past. But if you forget your password and need to reset it, or if your account is locked and you need to unlock it, those capabilities are only available from the Self Service Password Reset portal at this time.

Do I have to change my password when I unlock my account?

No. A “password unlock” request does not necessitate making a password change.

Why are images and/or other aspects of the SSPR portal's web pages rendering improperly?

This can happen if you are using Microsoft Internet Explorer. If your SSPR pages render oddly in IE, try changing the browser’s compatibility mode.

What if I am unable to use a feature on the Self Service Password Reset Portal?

Contact IT Sysman support for any issues that you encounter.