public:passwd_change

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revisionBoth sides next revision
public:passwd_change [2020-12-08 14:36] veselypublic:passwd_change [2021-09-16 13:23] vesely
Line 1: Line 1:
 ====== How to change your CERGE-EI accounts passwords ====== ====== How to change your CERGE-EI accounts passwords ======
  
-Not all accounts at CERGE-EI are mutualy connected by a single password. This is a security measure.+Because of security measure, CERGE-EI distinguishes between __network (domain) passwords__ and __mailserver passwords__.
  
-There is a different password for:+As result, there are different passwords for:
  
-  * Your **domain account ****ad.cerge-ei.cz**  (Active Directory) used for network logon, VPN, web, TAS etc. [D] +  * your **domain account **//**ad.cerge-ei.cz**//  (Active Directory) used for network logon, VPN, web, TAS etc. [D] 
-  * Your **Zimbra mail exchange**  server account [X] +  * your **Zimbra mail exchange**  server account [X] 
-  * Your **Zimbra archive mail**  server account (if available) [A]+  * your **Zimbra archive mail**  server account (if available) [A]
  
 ===== Guidelines ===== ===== Guidelines =====
  
-==== Domain account [D] ====+==== for Domain account [D] ====
  
 //Username is usualy in the format **nsurname**  (first letter of name + surname, max. 8 characters. e.g. jdoe, bsprings, …). *// //Username is usualy in the format **nsurname**  (first letter of name + surname, max. 8 characters. e.g. jdoe, bsprings, …). *//
  
-  * **Option A: Windows login page**<WRAP round center tip 100%>Press Ctrl+Alt+Delete → click “Change a password…” , type your old password followed by a new password as indicated, and then type the new password again to confirm it.</WRAP> +There are two basic ways how you can change your domain account: 
-  * **Option B: Password Self-Service Portal **  (experimental)<WRAP round center tip 100%> Go to the address [[https://portal.cerge-ei.cz/pwm|https://portal.cerge-ei.cz/pwm]] and log with your domain account. You can also **reset forgotten password**  if necessary (you have to have your mobile phone registered at the portal in advance to be able reset password via SMS). </WRAP> + 
-* You can find out your username at the self-service portal → click //[Forgotten User Name]//  button at the Password Self-Service Portal+  * **-> the first way: Windows login page**<WRAP round center tip 100%>Press Ctrl+Alt+Delete → click “Change a password…” , type your old password followed by a new password as indicated, and then type the new password again to confirm it.</WRAP> 
 +  * **-> the second way: Password Self-Service Portal **  (experimental)<WRAP round center tip 100%> Go to the address [[https://portal.cerge-ei.cz/pwm|https://portal.cerge-ei.cz/pwm]] and log with your domain account. You can also **reset forgotten password**  if necessary (you have to have your mobile phone registered at the portal in advance to be able reset password via SMS). </WRAP> 
 +<WRAP round center info 100%> Please note, that there is a transition process of gradual enabling of 'older' user accounts to use the Self-Service Portal. If you wish to use this feature, send your request to the HELPDESK email and we will enable your account for this Self-service portal immediately. </WRAP> * You can find out your username at the self-service portal → click //[Forgotten User Name]//  button at the Password Self-Service Portal
  
 See [[:public:user_accounts|User Accounts]] page for more details… See [[:public:user_accounts|User Accounts]] page for more details…
  
-==== Email Password ====+==== Email Accounts Passwords ====
  
-=== Zimbra email Exchange [X] ===+=== for Zimbra email Exchange [X] ===
  
 [[https://mail.cerge-ei.cz</font|Server: https://mail.cerge-ei.cz</font]]> [[https://mail.cerge-ei.cz</font|Server: https://mail.cerge-ei.cz</font]]>
Line 29: Line 31:
 Use [[https://mail.cerge-ei.cz|webmail]] for [[:public:emai:zimbra_password|Zimbra Password change ]] Use [[https://mail.cerge-ei.cz|webmail]] for [[:public:emai:zimbra_password|Zimbra Password change ]]
  
-=== Zimbra Archive [A] ===+=== for Zimbra Archive [A] === 
 + 
 +[[https://mailarch.cerge-ei.cz</font|Server: https://mailarch.cerge-ei.cz</font]]>(experimental/pilot phase) <WRAP round center tip 100%>__**PWMA - Self-service Portal**__  Go to the address [[https://portal.cerge-ei.cz/pwma|https://portal.cerge-ei.cz/pwma]] and log with your Archive Zimbra account. You can also **reset forgotten password**  at the PWMA Portal if necessary **Important!**  You need to have ** mobile phone number registered at the portal**  in advance to be able reset password via SMS. </WRAP>
  
-[[https://mailarch.cerge-ei.cz</font|Server: https://mailarch.cerge-ei.cz</font]]>(experimental/pilot phase) <WRAP round center tip 100%>__**PWMA - Self-service Portal**__  Go to the address [[https://portal.cerge-ei.cz/pwma|https://portal.cerge-ei.cz/pwma]] and log with your Archive Zimbra account. You can also **reset forgotten password**  at the PWMA Portal if necessary <font inherit/inherit;;#c0392b;;inherit>**Important!**  You need to have ** mobile phone number registered at the portal**  in advance to be able reset password via SMS. </WRAP> 
 === Kerio Mailserver [K] === === Kerio Mailserver [K] ===
 +
 Use Kerio webmail ([[https://mbox.cerge-ei.cz/|https://mbox.cerge-ei.cz/]]) Use Kerio webmail ([[https://mbox.cerge-ei.cz/|https://mbox.cerge-ei.cz/]])
 +
 ===== FACTS / HINTS ===== ===== FACTS / HINTS =====
-* **One account for all services**  (called Domain Account). There is **only ****one**** login name and password**  which serves **for**  almost **all applications**  and services at CERGE-EI (Login to computer; Network shares, CEIS; CMS; Reporting; internal web pages; printers etc.) Mostly the password is common also for Email Server Zimbra - including Webmail, SMTP and IMAP access; * You can have an **independent password for email**  - coordinate accounts separation with the IT office in advance (older accounts are still synced between email and domain) * **Do not change the email password via Zimbra webmail**  to make it independent, it could lock your network account. (Unless you are the person with the **independent email password**. This case use [[https://mail.cerge-ei.cz|webmail]] for [[:public:emai:zimbra_password|Zimbra Password change ]] ) * Password may be changed **ONLY ONCE per day**. * **Passwords must meet complexity requirements**<WRAP round center important 60%> <font 11.0pt/11;;#27ae60;;inherit>Please understand, that it is important to comply with the following rules: + 
-* Passwords must not contain the user's name or username; +* **One account for all services**  (called Domain Account). There is **only ****one**** login name and password**  which serves **for**  almost **all applications**  and services at CERGE-EI (Login to computer; Network shares, CEIS; CMS; Reporting; internal web pages; printers etc.) Mostly the password is common also for Email Server Zimbra - including Webmail, SMTP and IMAP access; * You can have an **independent password for email**  - coordinate accounts separation with the IT office in advance (older accounts are still synced between email and domain) * **Do not change the email password via Zimbra webmail**  to make it independent, it could lock your network account. (Unless you are the person with the **independent email password**. This case use [[https://mail.cerge-ei.cz|webmail]] for [[:public:emai:zimbra_password|Zimbra Password change ]] ) * Password may be changed **ONLY ONCE per day**. * **Passwords must meet complexity requirements**<WRAP round center important 60%> <font 11.0pt/11;;#27ae60;;inherit>Please understand, that it is important to comply with the following rules: * Passwords must not contain the user's name or username; * Passwords must contain characters from the following four categories: uppercase characters, lowercase characters, digits, other characters: ~!@#$%^&*_-+=`|\(){}[]:;"'<>,.?/ * Must be at least 9 characters long.</WRAP> * **Passwords remembered by email clients can <font inherit/inherit;;red;;inherit>LOCK YOUR ACCOUNT** * Account is temporarily** locked after several unsuccessful logon attempts** with a wrong password! * **Email clients** (like Thunderbird or Outlook), **smartphones** and tablets or **web browsers** (like Firefox or Chrome) **allow password to be remembered**. * **<font inherit/inherit;;red;;inherit>BE AWARE that**</font> **<font inherit/inherit;;red;;inherit>SMARTPHONES</font>**<font inherit/inherit;;red;;inherit>**usually**</font><font inherit/inherit;;red;;inherit>** use remembered password **</font><font inherit/inherit;;red;;inherit>**repeatedly **</font>regardless of its validity which results in the **account lockdown**. 
-* Passwords must contain characters from the following four categories: uppercase characters, lowercase characters, digits, other characters: ~!@#$%^&*_-+=`|\(){}[]:;"'<>,.?/ +  * **Plan well before you change your password! **Recall all devices or applications with stored passwords (especially smartphones and tablets) in advance. 
-* Must be at least 9 characters long.</WRAP> +  * **Immediately after the password change**, the client password in your mail, smartphone, tablet **must be changed too**. 
-* **Passwords remembered by email clients can <font inherit/inherit;;red;;inherit>LOCK YOUR ACCOUNT</font>** +  * **What to do, if you find out that your AD account or mailbox is locked?** 
-      * Account is temporarily** locked after several unsuccessful logon attempts**  with a wrong password! +  * **Try to find the reason.**  Have you made many unsuccessful attempts? Have you changed your password? Is your smartphone/tablet active? 
-      * **Email clients**  (like Thunderbird or Outlook), **smartphones**  and tablets or **web browsers**  (like Firefox or Chrome) **allow password to be remembered**. +  * **Stop or power off any possible source of wrong passwords**, e.g. running mail client, browser, smartphone or tablet. 
-      * **<font inherit/inherit;;red;;inherit>BE AWARE that</font>** **<font inherit/inherit;;red;;inherit>SMARTPHONES</font>**<font inherit/inherit;;red;;inherit>**usually**</font><font inherit/inherit;;red;;inherit>** use remembered password **</font><font inherit/inherit;;red;;inherit>**repeatedly **</font>regardless of its validity which results in the **account lockdown**. +  * **Wait a required ****time****period**  (until automatic account unlock applies) 
-      * **Plan well before you change your password! **Recall all devices or applications with stored passwords (especially smartphones and tablets) in advance. +  * **Check/change password settings in all client applications.**  Mainly smartphones don't allow to change/save the new password without checking it on the server (It's impossible with locked account). 
-      * **Immediately after the password change**, the client password in your mail, smartphone, tablet **must be changed too**. +  * **Email client usually requires both IMAP (incoming) and SMTP (outgoing) passwords to be set**
-      * **What to do, if you find out that your AD account or mailbox is locked?** +
-      * **Try to find the reason.**  Have you made many unsuccessful attempts? Have you changed your password? Is your smartphone/tablet active? +
-      * **Stop or power off any possible source of wrong passwords**, e.g. running mail client, browser, smartphone or tablet. +
-      * **Wait a required ****time****period**  (until automatic account unlock applies) +
-      * **Check/change password settings in all client applications.**  Mainly smartphones don't allow to change/save the new password without checking it on the server (It's impossible with locked account). +
-      * **Email client usually requires both IMAP (incoming) and SMTP (outgoing) passwords to be set**+
 ===== MORE DETAILED INFORMATION ===== ===== MORE DETAILED INFORMATION =====
  
  • /var/www/html/dokuwiki/data/pages/public/passwd_change.txt
  • Last modified: 2023-04-21 12:46
  • by marp