How we did it
 
|
|||
 | |||
|
We installed Password Bouncer on a Pentium III 700-MHz machine with 256M bytes of RAM and running Windows 2000 Professional system for use in protecting a Win 2000 domain with 10 systems, 20 users and one domain controller. We created an initial password policy during installation and created new user accounts and changed the passwords of existing user accounts to ensure the password policy was being enforced. We tried passwords that did not adhere to the policy to make sure they would be rejected and created passwords that fit the policy to make sure they were accepted. We then changed the password policy using the management interface and performed the same tests as those mentioned above to ensure the changes in the password policy were deployed.
RELATED LINKS
Andress is president of ArcSec Technologies, a security consulting firm. Her book, Surviving Security, was recently published. She can be reached at mandy@arcsec.com.
In real life, smart cards are gaining on passwords alone
As you plan your hardware and software rollouts, consider at least prestaging card readers or other devices so you'll be ready for this technology.
Network World, 07/16/01.
Password policies
Connectotel released a new version of its Password Policy Manager for Novell Directory Services (NDS). This is a security add-on which provides centralized management and real-time enforcement of password policies.
Network World Fusion newsletter, 09/27/00.
Novell upgrades Single Sign-on
Latest version adds new features for managing multiple user names and passwords.
Network World, 01/15/01.
