Both sides previous revision Previous revision Next revision | Previous revision Next revisionBoth sides next revision |
public:passwd_change [2020-04-14 13:39] – vesely | public:passwd_change [2023-02-14 16:26] – vesely |
---|
====== How to change your CERGE-EI account password ====== | ====== How to change your CERGE-EI accounts passwords ====== |
| |
Not all accounts at CERGE-EI are mutualy connected by a single password. This is a security measure. | Because of security measure, CERGE-EI distinguishes between __network (domain) passwords__ and __mailserver passwords__. |
| |
There is a different password for: | As a result, there are different passwords for: |
| |
* Your **domain account ****ad.cerge-ei.cz** (Active Directory) used for network logon, VPN, web, TAS etc. [D] | * your **domain account **//**ad.cerge-ei.cz**// (Active Directory) used for network logon, VPN, web, TAS etc. [D] |
* Your **Zimbra mail exchange** server account [X] | * your **Zimbra mail exchange** server account [X] |
* Your **Zimbra archive mail** server account (if available) [A] | * your **Zimbra archive mail** server account (if available) [A] |
| |
===== Password management (change) ===== | ===== Guidelines ===== |
| |
==== Domain account [D] ==== | ==== for Domain account [D] ==== |
| |
//Username is usualy in the format **nsurname** (first letter of name + surname, max. 8 characters. e.g. jdoe, bsprings, …). *// | //Username is usualy in the format **nsurname** (first letter of name + surname, max. 8 characters. e.g. jdoe, bsprings, …). *// |
| |
* **Option A: Windows login page**<WRAP round center tip 100%>Press Ctrl+Alt+Delete → click “Change a password…” , type your old password followed by a new password as indicated, and then type the new password again to confirm it.</WRAP> | There are two basic ways how you can change your domain account: |
* **Option B: Password Self-Service Portal ** (experimental)<WRAP round center tip 100%> Go to the address [[https://portal.cerge-ei.cz/pwm|https://portal.cerge-ei.cz/pwm]] and log with your domain account. You can also **reset forgotten password** if necessary (you have to have your mobile phone registered at the portal in advance to be able reset password via SMS). </WRAP> | |
* You can find out your username at the self-service portal → click //[Forgotten User Name]// button at the Password Self-Service Portal | |
| |
| * → the first way: **Windows login page**<WRAP round center tip 100%>Press Ctrl+Alt+Delete → click “Change a password…” , type your old password followed by a new password as indicated, and then type the new password again to confirm it.</WRAP> |
| * → the second way: **Password Self-Service Portal ** (experimental)<WRAP round center tip 100%> Go to the address **[[https://portal.cerge-ei.cz/pwm|https://portal.cerge-ei.cz/pwm]]** and log with your domain account. You can also **reset forgotten password** if necessary (you have to have your mobile phone registered at the portal in advance to be able reset password via SMS). </WRAP> |
| |
| <WRAP round center info 100%> Please note, that there is a transition process of gradual enabling of 'older' user accounts to use the Self-Service Portal. If you wish to use this feature, send your request to the HELPDESK email and we will enable your account for this Self-service portal immediately. </WRAP> * You can find out your username at the self-service portal → click //[Forgotten User Name]// button at the Password Self-Service Portal |
| |
See [[:public:user_accounts|User Accounts]] page for more details… | See [[:public:user_accounts|User Accounts]] page for more details… |
| |
==== Email Password ==== | ==== Email Accounts Passwords ==== |
| |
=== Zimbra email Exchange [X] === | === for Zimbra email Exchange [X] === |
| |
<font inherit/inherit;;#27ae60;;inherit>Server: https://mail.cerge-ei.cz</font> | [[https://mail.cerge-ei.cz</font|Server: https://mail.cerge-ei.cz</font]]> |
| |
Use [[https://mail.cerge-ei.cz|webmail]] for [[:public:emai:zimbra_password|Zimbra Password change ]] | Use [[https://mail.cerge-ei.cz|webmail]] for [[:public:emai:zimbra_password|Zimbra Password change ]] <WRAP round center tip 100%>__**PWMX - Self-service Portal**__ Go to the address [[https://portal.cerge-ei.cz/pwmx|https://portal.cerge-ei.cz/pwmx]] and log with your Zimbra account. |
| |
=== Zimbra Archive [A] === | User name is in short format (e.g. **jnovak**). |
| |
<font inherit/inherit;;#27ae60;;inherit>Server: https://mailarch.cerge-ei.cz</font>(experimental/pilot phase) | You can also **reset forgotten password** at the PWMX Portal if necessary **Important!** You need to have ** mobile phone number registered at the portal** in advance to be able reset password via SMS. |
| |
<WRAP round center tip 60%>Go to the address [[https://portal.cerge-ei.cz/pwma|https://portal.cerge-ei.cz/pwma]] and log with your Archive Zimbra account. | </WRAP> |
| |
You can also **reset forgotten password** if necessary | === for Zimbra Archive [A] === |
| |
<font inherit/inherit;;#c0392b;;inherit>**Important!**</font>You have to **have your mobile phone registered at the portal** in advance to be able reset password via SMS). </WRAP> | [[https://mailarch.cerge-ei.cz</font|Server: https://mailarch.cerge-ei.cz</font]]>(experimental/pilot phase) <WRAP round center tip 100%>__**PWMA - Self-service Portal**__ Go to the address [[https://portal.cerge-ei.cz/pwma|https://portal.cerge-ei.cz/pwma]] and log with your Archive Zimbra account. |
| |
=== Kerio Mailserver [K] === | User name is in short format (e.g. **jnovak**). |
| |
Use Kerio webmail ([[https://mbox.cerge-ei.cz/|https://mbox.cerge-ei.cz/]]) | You can also **reset forgotten password** at the PWMA Portal if necessary **Important!** You need to have ** mobile phone number registered at the portal** in advance to be able reset password via SMS. </WRAP> |
| |
| === === |
| |
===== FACTS / HINTS ===== | ===== FACTS / HINTS ===== |
| |
* **One account for all services** (called Domain Account). There is **only ****one**** login name and password** which serves **for** almost **all applications** and services at CERGE-EI (Login to computer; Network shares, CEIS; CMS; Reporting; internal web pages; printers etc.) Mostly the password is common also for Email Server Zimbra - including Webmail, SMTP and IMAP access; | * **One account for all services** (called Domain Account). There is **only ****one**** login name and password** which serves **for** almost **all applications** and services at CERGE-EI (Login to computer; Network shares, CEIS; CMS; Reporting; internal web pages; printers etc.) Password may be changed **ONLY ONCE per day**. |
* You can have an **independent password for email** | * Usually you have an **independent password for Email Server Zimbra** - including Webmail, SMTP and IMAP access; This case you can change the email password via Zimbra webmail. Than you can have two different passwords (recommended mode). Use [[https://mail.cerge-ei.cz|webmail]] for [[:public:emai:zimbra_password|Zimbra Password change ]] ) |
| * If you have an **older account** at CERGE-EI you can still have the **password synced between email and domain**. Coordinate accounts separation with the IT office in advance. __Do not change the email password via Zimbra webmail to make it independent, it could lock your network account.__ |
- coordinate accounts separation with the IT office in advance (older accounts are still synced between email and domain) | |
| |
* **Do not change the email password via Zimbra webmail** to make it independent, it could lock your network account. \\ | |
(Unless you are the person with the **independent email password**. This case use [[https://mail.cerge-ei.cz|webmail]] for [[:public:emai:zimbra_password|Zimbra Password change ]] ) | |
* Password may be changed **ONLY ONCE per day**. | |
* **Passwords must meet complexity requirements**<WRAP round center important 60%> | |
<font 11.0pt/11;;inherit;;inherit>Please understand, that it is important to comply with the following rules:</font> | |
| |
* Passwords must not contain the user's name or username; | |
| |
* Passwords must contain characters from the following four categories: uppercase characters, lowercase characters, digits, other characters: ~!@#$%^&*_-+=`|\(){}[]:;"'<>,.?/ | |
| |
* Must be at least 9 characters long.</WRAP> | |
| |
* **Passwords remembered by email clients can <font inherit/inherit;;red;;inherit>LOCK YOUR ACCOUNT</font>** | * **Passwords must meet complexity requirements** |
* Account is temporarily** locked after several unsuccessful logon attempts** with a wrong password! | * Passwords **must not contain the user's name or username** |
* **Email clients** (like Thunderbird or Outlook), **smartphones** and tablets or **web browsers** (like Firefox or Chrome) **allow password to be remembered**. | * Passwords **must contain characters from the following four categories**: uppercase characters, lowercase characters, digits, other characters: ~!@#$%^&*_-+=`|\(){}[]:;"'<>,.?/ |
* **<font inherit/inherit;;red;;inherit>BE AWARE that</font>** **<font inherit/inherit;;red;;inherit>SMARTPHONES</font>**<font inherit/inherit;;red;;inherit>**usually**</font><font inherit/inherit;;red;;inherit>** use remembered password **</font><font inherit/inherit;;red;;inherit>**repeatedly **</font>regardless of its validity which results in the **account lockdown**. | * **Must be at least 9 characters long ** |
* **Plan well before you change your password! **Recall all devices or applications with stored passwords (especially smartphones and tablets) in advance. | * **Passwords remembered by email clients can |
* **Immediately after the password change**, the client password in your mail, smartphone, tablet **must be changed too**. | <font inherit/inherit;;red;;inherit>LOCK YOUR ACCOUNT</font> ** |
* **What to do, if you find out that your AD account or mailbox is locked?** | * Account is temporarily** locked after several unsuccessful logon attempts** with a wrong password! |
* **Try to find the reason.** Have you made many unsuccessful attempts? Have you changed your password? Is your smartphone/tablet active? | * **Email clients** (like Thunderbird or Outlook), **smartphones** and tablets or **web browsers** (like Firefox or Chrome) **allow password to be remembered**. |
* **Stop or power off any possible source of wrong passwords**, e.g. running mail client, browser, smartphone or tablet. | * |
* **Wait a required ****time****period** (until automatic account unlock applies) | <font inherit/inherit;;red;;inherit>**BE AWARE that SMARTPHONES usually** use remembered password repeatedly</font> **regardless of its validity** which results in the **account lockdown**. |
* **Check/change password settings in all client applications.** Mainly smartphones don't allow to change/save the new password without checking it on the server (It's impossible with locked account). | * **Plan well before you change your password! **Recall all devices or applications with stored passwords (especially smartphones and tablets) in advance. |
* **Email client usually requires both IMAP (incoming) and SMTP (outgoing) passwords to be set** | * **Immediately after the password change**, the client password in your mail, smartphone, tablet **must be changed too**. |
| * **What to do, if you find out that your AD account or mailbox is locked?** |
| * **Try to find the reason.** Have you made many unsuccessful attempts? Have you changed your password? Is your smartphone/tablet active? |
| * **Stop or power off any possible source of wrong passwords**, e.g. running mail client, browser, smartphone or tablet. |
| * **Wait a required ****time****period** (until automatic account unlock applies) |
| * **Check/change password settings in all client applications.** Mainly smartphones don't allow to change/save the new password without checking it on the server (It's impossible with locked account). |
| * **Email client usually requires both IMAP (incoming) and SMTP (outgoing) passwords to be set** |
===== MORE DETAILED INFORMATION ===== | ===== MORE DETAILED INFORMATION ===== |
| |