Alternatively, your organization could consider a requirement for all administrator passwords to use ALT characters in the 0128 - 0159 range.
PASSSWORD REQUIREMENTS FOR SKYPE PASSWORD
However, such stringent password requirements can result in unhappy users and an extremely busy help desk. Also, the use of ALT key character combinations can greatly enhance the complexity of a password. (Upper row characters are those that require you to hold down the SHIFT key and press any of the digits between 1 and 0.) A custom password filter might also perform a dictionary check to verify that the proposed password does not contain common dictionary words or fragments. For example, a custom password filter might require the use of non-upper row characters.
If your organization has more stringent security requirements, you can create a custom version of the Passfilt.dll file that allows the use of arbitrarily complex password strength rules. However, all users should be able to comply with the complexity requirement with minimal difficulty. Solution To establish the recommended configuration via GP, set the following UI path to Enabled: Computer Configuration\Policies\Windows Settings\Security Settings\Account Policies\Password Policy\Password must meet complexity requirements Impact: If the default password complexity configuration is retained, additional help desk calls for locked-out accounts could occur because users might not be accustomed to passwords that contain non-alphabetic characters. Rationale: Passwords that contain only alphanumeric characters are extremely easy to discover with several publicly available tools. The recommended state for this setting is: Enabled. Remember, these times will significantly increase for passwords that use ALT characters and other special keyboard characters such as '!' or Proper use of the password settings can help make it difficult to mount a brute force attack.
Although this might seem to be a large number, at 1,000,000 attempts per second it would take only 59 hours to try all possible passwords. An eight-character password has 268 (or 2 x 1011) possible combinations. A seven-character case-sensitive alphanumeric password without punctuation has 627 combinations. A seven-character alphabetic password with case sensitivity has 527 combinations. At 1,000,000 attempts per second (a capability of many password-cracking utilities), it would only take 133 minutes to crack. For instance, a seven-character, all lower-case alphabetic password would have 267 (approximately 8 x 109 or 8 billion) possible combinations.
Each additional character in a password increases its complexity exponentially. This fifth category can be regionally specific.
PASSSWORD REQUIREMENTS FOR SKYPE FULL
When this policy is enabled, passwords must meet the following minimum requirements: - Not contain the user's account name or parts of the user's full name that exceed two consecutive characters - Be at least six characters in length - Contain characters from three of the following categories: - English uppercase characters (A through Z) - English lowercase characters (a through z) - Base 10 digits (0 through 9) - Non-alphabetic characters (for example, !, $, #, %) - A catch-all category of any Unicode character that does not fall under the previous four categories. Information This policy setting checks all new passwords to ensure that they meet basic requirements for strong passwords.
0 kommentar(er)
