Select the minimum number of characters in the password. Default: 6 characters. Range: 6-10 characters.

This option defines the level of security for passwords, which can be simple and allow any character combination, or very secure, requiring upper and lower case characters, as well as special characters. Default: No Restrictions.

Select the number of days the password will remain valid before the user will be prompted to change it. Default: 90 Days. Range: 15, 30, 60, 90, 120 days, Never.

By default, no user is exempt from the Password Policy. You can specify a user to be excluded from the password expiration policy by selecting Never.

Select the users for whom the password will never expire. Only active users appear in the list. You can make an user account active by selecting the Settings > Users > Update User > Basic tab > Active option.

The new password cannot match the number of previous passwords. Default: Last Password. Range: Last 2-5 passwords.

Select the number of days that must pass before a user can change passwords. Default: No Minimum. Range: 1-5 Days.

Select the length of time the session will remain active without any user activity. The session will end when it reaches the selected timeout. The user will need to log in again. Default: 30 Minutes. Range: 15 minutes, 30 minutes, and 1 hour.

Select the number of login attempts before the account is locked out. Default: 5 failed tries. Choices: 3-10 failed tries, No limit.

The login limit defines the number of failed attempts allowed before a user account is disabled or locked for a specified time. When a user attempts to login and fails (because of an incorrect password), each attempt counts against the login limit. When the login limit is achieved, the account is disabled or locked for a specified time, according to the parameters set in the Account Lockout Duration field. The login limit is defined by the Password Policy.

Select the length of time that an account is locked out. Default: 15 minutes. Choices: 5, 10, 15, 30 minutes, 1 hour, Disable.

For audit purposes, the following information is displayed after you save the record:

Last Modified By <username> on {date} <time> Created by System.