public:passwd_change

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
public:passwd_change [2020-12-08 15:37]
vesely [for Domain account [D]]
public:passwd_change [2021-09-16 15:23] (current)
vesely
Line 1: Line 1:
 ====== How to change your CERGE-EI accounts passwords ====== ====== How to change your CERGE-EI accounts passwords ======
  
-Not all accounts at CERGE-EI are mutualy connected by a single password. This is a security measure.+Because of security measure, CERGE-EI distinguishes between __network (domain) passwords__ and __mailserver passwords__.
  
-There is a different password for:+As result, there are different passwords for:
  
-  * Your **domain account ****ad.cerge-ei.cz**  (Active Directory) used for network logon, VPN, web, TAS etc. [D] +  * your **domain account **//**ad.cerge-ei.cz**//  (Active Directory) used for network logon, VPN, web, TAS etc. [D] 
-  * Your **Zimbra mail exchange**  server account [X] +  * your **Zimbra mail exchange**  server account [X] 
-  * Your **Zimbra archive mail**  server account (if available) [A]+  * your **Zimbra archive mail**  server account (if available) [A]
  
 ===== Guidelines ===== ===== Guidelines =====
Line 15: Line 15:
 //Username is usualy in the format **nsurname**  (first letter of name + surname, max. 8 characters. e.g. jdoe, bsprings, …). *// //Username is usualy in the format **nsurname**  (first letter of name + surname, max. 8 characters. e.g. jdoe, bsprings, …). *//
  
-There are two basic ways:+There are two basic ways how you can change your domain account:
  
-  * **the first way: Windows login page**<WRAP round center tip 100%>Press Ctrl+Alt+Delete → click “Change a password…” , type your old password followed by a new password as indicated, and then type the new password again to confirm it.</WRAP> +  * → the first way: **Windows login page**<WRAP round center tip 100%>Press Ctrl+Alt+Delete → click “Change a password…” , type your old password followed by a new password as indicated, and then type the new password again to confirm it.</WRAP> 
-  * **the second way: Password Self-Service Portal **  (experimental)<WRAP round center tip 100%> Go to the address [[https://portal.cerge-ei.cz/pwm|https://portal.cerge-ei.cz/pwm]] and log with your domain account. You can also **reset forgotten password**  if necessary (you have to have your mobile phone registered at the portal in advance to be able reset password via SMS). </WRAP> +  * → the second way: **Password Self-Service Portal **  (experimental)<WRAP round center tip 100%> Go to the address **[[https://portal.cerge-ei.cz/pwm|https://portal.cerge-ei.cz/pwm]]** and log with your domain account. You can also **reset forgotten password**  if necessary (you have to have your mobile phone registered at the portal in advance to be able reset password via SMS). </WRAP> 
-* You can find out your username at the self-service portal → click //[Forgotten User Name]//  button at the Password Self-Service Portal+ 
 +<WRAP round center info 100%> Please note, that there is a transition process of gradual enabling of 'older' user accounts to use the Self-Service Portal. If you wish to use this feature, send your request to the HELPDESK email and we will enable your account for this Self-service portal immediately. </WRAP> * You can find out your username at the self-service portal → click //[Forgotten User Name]//  button at the Password Self-Service Portal
  
 See [[:public:user_accounts|User Accounts]] page for more details… See [[:public:user_accounts|User Accounts]] page for more details…
  
-==== Email Password ====+==== Email Accounts Passwords ====
  
 === for Zimbra email Exchange [X] === === for Zimbra email Exchange [X] ===
Line 33: Line 34:
 === for Zimbra Archive [A] === === for Zimbra Archive [A] ===
  
-[[https://mailarch.cerge-ei.cz</font|Server: https://mailarch.cerge-ei.cz</font]]>(experimental/pilot phase) <WRAP round center tip 100%>__**PWMA - Self-service Portal**__  Go to the address [[https://portal.cerge-ei.cz/pwma|https://portal.cerge-ei.cz/pwma]] and log with your Archive Zimbra account. You can also **reset forgotten password**  at the PWMA Portal if necessary  **Important!** You need to have ** mobile phone number registered at the portal** in advance to be able reset password via SMS. </WRAP>+[[https://mailarch.cerge-ei.cz</font|Server: https://mailarch.cerge-ei.cz</font]]>(experimental/pilot phase) <WRAP round center tip 100%>__**PWMA - Self-service Portal**__  Go to the address [[https://portal.cerge-ei.cz/pwma|https://portal.cerge-ei.cz/pwma]] and log with your Archive Zimbra account. You can also **reset forgotten password**  at the PWMA Portal if necessary **Important!**  You need to have ** mobile phone number registered at the portal**  in advance to be able reset password via SMS. </WRAP>
  
 === Kerio Mailserver [K] === === Kerio Mailserver [K] ===
Line 41: Line 42:
 ===== FACTS / HINTS ===== ===== FACTS / HINTS =====
  
-* **One account for all services**  (called Domain Account). There is **only ****one**** login name and password**  which serves **for**  almost **all applications**  and services at CERGE-EI (Login to computer; Network shares, CEIS; CMS; Reporting; internal web pages; printers etc.) Mostly the password is common also for Email Server Zimbra - including Webmail, SMTP and IMAP access; * You can have an **independent password for email**  - coordinate accounts separation with the IT office in advance (older accounts are still synced between email and domain) * **Do not change the email password via Zimbra webmail**  to make it independent, it could lock your network account. (Unless you are the person with the **independent email password**. This case use [[https://mail.cerge-ei.cz|webmail]] for [[:public:emai:zimbra_password|Zimbra Password change ]] ) * Password may be changed **ONLY ONCE per day**. * **Passwords must meet complexity requirements**<WRAP round center important 60%> <font 11.0pt/11;;#27ae60;;inherit>Please understand, that it is important to comply with the following rules: * Passwords must not contain the user's name or username; * Passwords must contain characters from the following four categories: uppercase characters, lowercase characters, digits, other characters: ~!@#$%^&*_-+=`|\(){}[]:;"'<>,.?/ * Must be at least 9 characters long.</WRAP> * **Passwords remembered by email clients can <font inherit/inherit;;red;;inherit>LOCK YOUR ACCOUNT** +* **One account for all services**  (called Domain Account). There is **only ****one**** login name and password**  which serves **for**  almost **all applications**  and services at CERGE-EI (Login to computer; Network shares, CEIS; CMS; Reporting; internal web pages; printers etc.) Mostly the password is common also for Email Server Zimbra - including Webmail, SMTP and IMAP access; * You can have an **independent password for email**  - coordinate accounts separation with the IT office in advance (older accounts are still synced between email and domain) * **Do not change the email password via Zimbra webmail**  to make it independent, it could lock your network account. (Unless you are the person with the **independent email password**. This case use [[https://mail.cerge-ei.cz|webmail]] for [[:public:emai:zimbra_password|Zimbra Password change ]] ) * Password may be changed **ONLY ONCE per day**. * **Passwords must meet complexity requirements**<WRAP round center important 60%> <font 11.0pt/11;;#27ae60;;inherit>Please understand, that it is important to comply with the following rules: * Passwords must not contain the user's name or username; * Passwords must contain characters from the following four categories: uppercase characters, lowercase characters, digits, other characters: ~!@#$%^&*_-+=`|\(){}[]:;"'<>,.?/ * Must be at least 9 characters long.</WRAP> * **Passwords remembered by email clients can <font inherit/inherit;;red;;inherit>LOCK YOUR ACCOUNT** * Account is temporarily** locked after several unsuccessful logon attempts** with a wrong password! * **Email clients** (like Thunderbird or Outlook), **smartphones** and tablets or **web browsers** (like Firefox or Chrome) **allow password to be remembered**. * **<font inherit/inherit;;red;;inherit>BE AWARE that**</font> **<font inherit/inherit;;red;;inherit>SMARTPHONES</font>**<font inherit/inherit;;red;;inherit>**usually**</font><font inherit/inherit;;red;;inherit>** use remembered password **</font><font inherit/inherit;;red;;inherit>**repeatedly **</font>regardless of its validity which results in the **account lockdown**.
-* Account is temporarily** locked after several unsuccessful logon attempts**  with a wrong password! +
-* **Email clients**  (like Thunderbird or Outlook), **smartphones**  and tablets or **web browsers**  (like Firefox or Chrome) **allow password to be remembered**. +
-* **<font inherit/inherit;;red;;inherit>BE AWARE that</font>** **<font inherit/inherit;;red;;inherit>SMARTPHONES</font>**<font inherit/inherit;;red;;inherit>**usually**</font><font inherit/inherit;;red;;inherit>** use remembered password **</font><font inherit/inherit;;red;;inherit>**repeatedly **</font>regardless of its validity which results in the **account lockdown**.+
   * **Plan well before you change your password! **Recall all devices or applications with stored passwords (especially smartphones and tablets) in advance.   * **Plan well before you change your password! **Recall all devices or applications with stored passwords (especially smartphones and tablets) in advance.
   * **Immediately after the password change**, the client password in your mail, smartphone, tablet **must be changed too**.   * **Immediately after the password change**, the client password in your mail, smartphone, tablet **must be changed too**.
  • /var/www/html/dokuwiki/data/attic/public/passwd_change.1607438230.txt.gz
  • Last modified: 2020-12-08 15:37
  • by vesely