public:passwd_change

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
public:passwd_change [2020-04-14 15:43]
vesely
public:passwd_change [2021-09-16 15:23] (current)
vesely
Line 1: Line 1:
-====== How to change your CERGE-EI account password ======+====== How to change your CERGE-EI accounts passwords ======
  
-Not all accounts at CERGE-EI are mutualy connected by a single password. This is a security measure.+Because of security measure, CERGE-EI distinguishes between __network (domain) passwords__ and __mailserver passwords__.
  
-There is a different password for:+As result, there are different passwords for:
  
-  * Your **domain account ****ad.cerge-ei.cz**  (Active Directory) used for network logon, VPN, web, TAS etc. [D] +  * your **domain account **//**ad.cerge-ei.cz**//  (Active Directory) used for network logon, VPN, web, TAS etc. [D] 
-  * Your **Zimbra mail exchange**  server account [X] +  * your **Zimbra mail exchange**  server account [X] 
-  * Your **Zimbra archive mail**  server account (if available) [A]+  * your **Zimbra archive mail**  server account (if available) [A]
  
-===== Password management (change) =====+===== Guidelines =====
  
- +==== for Domain account [D] ====
-==== Domain account [D] ====+
  
 //Username is usualy in the format **nsurname**  (first letter of name + surname, max. 8 characters. e.g. jdoe, bsprings, …). *// //Username is usualy in the format **nsurname**  (first letter of name + surname, max. 8 characters. e.g. jdoe, bsprings, …). *//
  
-  * **Option A: Windows login page**<WRAP round center tip 100%>Press Ctrl+Alt+Delete → click “Change a password…” , type your old password followed by a new password as indicated, and then type the new password again to confirm it.</WRAP> +There are two basic ways how you can change your domain account:
-  * **Option B: Password Self-Service Portal **  (experimental)<WRAP round center tip 100%> Go to the address [[https://portal.cerge-ei.cz/pwm|https://portal.cerge-ei.cz/pwm]] and log with your domain account. You can also **reset forgotten password**  if necessary (you have to have your mobile phone registered at the portal in advance to be able reset password via SMS). </WRAP> +
-* You can find out your username at the self-service portal → click //[Forgotten User Name]//  button at the Password Self-Service Portal+
  
 +  * → the first way: **Windows login page**<WRAP round center tip 100%>Press Ctrl+Alt+Delete → click “Change a password…” , type your old password followed by a new password as indicated, and then type the new password again to confirm it.</WRAP>
 +  * → the second way: **Password Self-Service Portal **  (experimental)<WRAP round center tip 100%> Go to the address **[[https://portal.cerge-ei.cz/pwm|https://portal.cerge-ei.cz/pwm]]** and log with your domain account. You can also **reset forgotten password**  if necessary (you have to have your mobile phone registered at the portal in advance to be able reset password via SMS). </WRAP>
 +
 +<WRAP round center info 100%> Please note, that there is a transition process of gradual enabling of 'older' user accounts to use the Self-Service Portal. If you wish to use this feature, send your request to the HELPDESK email and we will enable your account for this Self-service portal immediately. </WRAP> * You can find out your username at the self-service portal → click //[Forgotten User Name]//  button at the Password Self-Service Portal
  
 See [[:public:user_accounts|User Accounts]] page for more details… See [[:public:user_accounts|User Accounts]] page for more details…
  
-==== Email Password ====+==== Email Accounts Passwords ====
  
-=== Zimbra email Exchange [X] ===+=== for Zimbra email Exchange [X] ===
  
-<font inherit/inherit;;#27ae60;;inherit>Server: https://mail.cerge-ei.cz</font>+[[https://mail.cerge-ei.cz</font|Server: https://mail.cerge-ei.cz</font]]>
  
 Use [[https://mail.cerge-ei.cz|webmail]] for [[:public:emai:zimbra_password|Zimbra Password change ]] Use [[https://mail.cerge-ei.cz|webmail]] for [[:public:emai:zimbra_password|Zimbra Password change ]]
  
-=== Zimbra Archive [A] ===+=== for Zimbra Archive [A] ===
  
-<font inherit/inherit;;#27ae60;;inherit>Server: https://mailarch.cerge-ei.cz</font>(experimental/pilot phase) +[[https://mailarch.cerge-ei.cz</font|Server: https://mailarch.cerge-ei.cz</font]]>(experimental/pilot phase) <WRAP round center tip 100%>__**PWMA - Self-service Portal**__  Go to the address [[https://portal.cerge-ei.cz/pwma|https://portal.cerge-ei.cz/pwma]] and log with your Archive Zimbra account. You can also **reset forgotten password**  at the PWMA Portal if necessary **Important!**  You need to have ** mobile phone number registered at the portal**  in advance to be able reset password via SMS. </WRAP>
- +
-<WRAP round center tip 100%>__**PWMA - Self-service Portal**__ +
- +
-Go to the address [[https://portal.cerge-ei.cz/pwma|https://portal.cerge-ei.cz/pwma]] and log with your Archive Zimbra account. +
- +
-You can also **reset forgotten password**  if necessary +
- +
-<font inherit/inherit;;#c0392b;;inherit>**Important!**</font>You have to **have your mobile phone registered at the portal**  in advance to be able reset password via SMS). </WRAP>+
  
 === Kerio Mailserver [K] === === Kerio Mailserver [K] ===
Line 49: Line 42:
 ===== FACTS / HINTS ===== ===== FACTS / HINTS =====
  
-  * **One account for all services**  (called Domain Account). There is **only ****one**** login name and password**  which serves **for**  almost **all applications**  and services at CERGE-EI (Login to computer; Network shares, CEIS; CMS; Reporting; internal web pages; printers etc.) Mostly the password is common also for Email Server Zimbra - including Webmail, SMTP and IMAP access; +* **One account for all services**  (called Domain Account). There is **only ****one**** login name and password**  which serves **for**  almost **all applications**  and services at CERGE-EI (Login to computer; Network shares, CEIS; CMS; Reporting; internal web pages; printers etc.) Mostly the password is common also for Email Server Zimbra - including Webmail, SMTP and IMAP access; * You can have an **independent password for email**  - coordinate accounts separation with the IT office in advance (older accounts are still synced between email and domain) * **Do not change the email password via Zimbra webmail**  to make it independent, it could lock your network account. (Unless you are the person with the **independent email password**. This case use [[https://mail.cerge-ei.cz|webmail]] for [[:public:emai:zimbra_password|Zimbra Password change ]] ) * Password may be changed **ONLY ONCE per day**. * **Passwords must meet complexity requirements**<WRAP round center important 60%> <font 11.0pt/11;;#27ae60;;inherit>Please understand, that it is important to comply with the following rules: * Passwords must not contain the user's name or username; * Passwords must contain characters from the following four categories: uppercase characters, lowercase characters, digits, other characters: ~!@#$%^&*_-+=`|\(){}[]:;"'<>,.?/ * Must be at least 9 characters long.</WRAP> * **Passwords remembered by email clients can <font inherit/inherit;;red;;inherit>LOCK YOUR ACCOUNT** * Account is temporarily** locked after several unsuccessful logon attempts** with a wrong password! * **Email clients** (like Thunderbird or Outlook), **smartphones** and tablets or **web browsers** (like Firefox or Chrome) **allow password to be remembered**. * **<font inherit/inherit;;red;;inherit>BE AWARE that**</font> **<font inherit/inherit;;red;;inherit>SMARTPHONES</font>**<font inherit/inherit;;red;;inherit>**usually**</font><font inherit/inherit;;red;;inherit>** use remembered password **</font><font inherit/inherit;;red;;inherit>**repeatedly **</font>regardless of its validity which results in the **account lockdown**. 
-  * You can have an **independent password for email** +  * **Plan well before you change your password! **Recall all devices or applications with stored passwords (especially smartphones and tablets) in advance. 
- +  * **Immediately after the password change**, the client password in your mail, smartphone, tablet **must be changed too**. 
-- coordinate accounts separation with the IT office in advance (older accounts are still synced between email and domain) +  * **What to do, if you find out that your AD account or mailbox is locked?** 
- +  * **Try to find the reason.**  Have you made many unsuccessful attempts? Have you changed your password? Is your smartphone/tablet active? 
-  * **Do not change the email password via Zimbra webmail**  to make it independent, it could lock your network account. \\ +  * **Stop or power off any possible source of wrong passwords**, e.g. running mail client, browser, smartphone or tablet. 
-    (Unless you are the person with the **independent email password**. This case use [[https://mail.cerge-ei.cz|webmail]] for [[:public:emai:zimbra_password|Zimbra Password change ]] ) +  * **Wait a required ****time****period**  (until automatic account unlock applies) 
-  * Password may be changed **ONLY ONCE per day**. +  * **Check/change password settings in all client applications.**  Mainly smartphones don't allow to change/save the new password without checking it on the server (It's impossible with locked account). 
-  * **Passwords must meet complexity requirements**<WRAP round center important 60%> +  * **Email client usually requires both IMAP (incoming) and SMTP (outgoing) passwords to be set**
-<font 11.0pt/11;;inherit;;inherit>Please understand, that it is important to comply with the following rules:</font> +
- +
-* Passwords must not contain the user's name or username; +
- +
-* Passwords must contain characters from the following four categories: uppercase characters, lowercase characters, digits, other characters: ~!@#$%^&*_-+=`|\(){}[]:;"'<>,.?/ +
- +
-* Must be at least 9 characters long.</WRAP> +
- +
-  * **Passwords remembered by email clients can <font inherit/inherit;;red;;inherit>LOCK YOUR ACCOUNT</font>** +
-      * Account is temporarily** locked after several unsuccessful logon attempts**  with a wrong password! +
-      * **Email clients**  (like Thunderbird or Outlook), **smartphones**  and tablets or **web browsers**  (like Firefox or Chrome) **allow password to be remembered**. +
-      * **<font inherit/inherit;;red;;inherit>BE AWARE that</font>** **<font inherit/inherit;;red;;inherit>SMARTPHONES</font>**<font inherit/inherit;;red;;inherit>**usually**</font><font inherit/inherit;;red;;inherit>** use remembered password **</font><font inherit/inherit;;red;;inherit>**repeatedly **</font>regardless of its validity which results in the **account lockdown**. +
-      * **Plan well before you change your password! **Recall all devices or applications with stored passwords (especially smartphones and tablets) in advance. +
-      * **Immediately after the password change**, the client password in your mail, smartphone, tablet **must be changed too**. +
-      * **What to do, if you find out that your AD account or mailbox is locked?** +
-      * **Try to find the reason.**  Have you made many unsuccessful attempts? Have you changed your password? Is your smartphone/tablet active? +
-      * **Stop or power off any possible source of wrong passwords**, e.g. running mail client, browser, smartphone or tablet. +
-      * **Wait a required ****time****period**  (until automatic account unlock applies) +
-      * **Check/change password settings in all client applications.**  Mainly smartphones don't allow to change/save the new password without checking it on the server (It's impossible with locked account). +
-      * **Email client usually requires both IMAP (incoming) and SMTP (outgoing) passwords to be set**+
 ===== MORE DETAILED INFORMATION ===== ===== MORE DETAILED INFORMATION =====
  
  • /var/www/html/dokuwiki/data/attic/public/passwd_change.1586871807.txt.gz
  • Last modified: 2020-04-14 15:43
  • by vesely