Password Policy Manager is an independently deployed component of Password Manager. Password Policy Manager is necessary to enforce password policies configured in Password Manager in such cases, when users change their passwords using means other than Password Manager. For example, when a user changes password on the Self-Service site, a new password is checked against password policy rules immediately, and if it complies with password policies configured in Password Manager, the new password is accepted. But when the user changes password by pressing CTRL+ALT+DELETE for example, the password’s compliance with password policies cannot be checked by Password Manager, unless Password Policy Manager is deployed on all domain controllers in a managed domain. Password Policy Manager installs the dictionary file in SYSVOL folder to set dictionary rule for new passwords. If the dictionary file already exists in SYSVOL folder, Password Policy Manager setup will not replace the file while installing.
If Password Policy Manager is not installed on all domain controllers in the domain, password policies configured in Password Manager will be ignored when users change password by means other than Password Manager.
|NOTE: The user account which is used to install Password Policy Manager, must have write access to SYSVOL folder in domain controller.|
|NOTE: When user uninstalls Password Policy Manager, the installer will not remove dictionary file from SYSVOL folder. User must remove the dictionary file manually in case the file is not needed.|
|Caution: Removing dictionary file from SYSVOL folder in one Domain Controller will result deletion of dictionary file in all Domain Controllers .|
For more information on Password Policy Manager, see About Password Policies.
Secure Password Extension is an independently deployed component that provides one-click access to the complete functionality of the Self-Service site from the Windows logon screen. Secure Password Extension also provides dialog boxes displayed on end-user computers that notify users who must create or update their Questions and Answers profiles with Password Manager.
Secure Password Extension should be installed on users’ computers through group policy.
For more information, see Secure Password Extension Overview.
Offline Password Reset is an independently deployed component that enables users to use the offline password reset functionality provided by Password Manager. This functionality allows resetting passwords when users have forgotten their current passwords and their computers are not connected to the intranet (Active Directory is not available).
Offine Password Reset should be installed on users’ computers through group policy.
For more information, see Reset Password in Active Directory.
Migration Wizard (part of Password Manager 5.7.1) allows you to convert users' Questions and Answers profiles from 5.x.x to 5.7.1. For more information, see To update users’ Q&A profiles with new instance settings.