Specify the minimum number of characters in the password. Default: 6 characters. Range: 6-10 characters.

This option defines the level of security for passwords, which can be simple and allow any character combination, or very secure, requiring upper and lower case characters, as well as special characters. Default: No Restrictions.

Specify the number of days the password will remain valid before the user will be prompted to change it. Default: 90 Days. Range: 15, 30, 60, 90, 120 days, Never.

By default, no user is exempt from the Password Policy. You can specify a user to be excluded from the password expiration policy by selecting Never.

The new password cannot match the number of previous passwords. Default: Last Password. Range: Last 2-5 passwords.

Specify the number of days that must pass before a user can change passwords. Default: No Minimum. Range: 1-5 Days.

Specify the number of login attempts before the account is locked out. Default: 5 failed tries. Choices: 3-10 failed tries, No limit.

The login limit defines the number of failed attempts allowed before a user account is disabled or locked for a specified time. When a user attempts to login and fails (because of an incorrect password), each attempt counts against the login limit. When the login limit is achieved, the account is disabled or locked for a specified time, according to the parameters set in the Account Lockout Duration field. The login limit is defined by the Password Policy.

Specify the length of time that an account is locked out. Default: 15 minutes. Choices: 5, 10, 15, 30 minutes, 1 hour, Disable.

For audit purposes, the following information is displayed after you save the record:

Last Modified By <username> on {date} <time> Created by System.