返回
-
标题
HOW TO: Modify the generated password length or complexity -
说明
Active Roles includes the capability to generate passwords for Active Directory user accounts. By default, these generated passwords will respect the minimum character requirement specified in the Default Domain Password Policy, but it may be desired to increase this character count.
-
原因
The behavior of Password Generation functionality is controlled by a policy. The default policies are:
Configuration/Policies/Administration/Builtin/Built-in Policy - Password GenerationConfiguration/Policies/Administration/Builtin/Built-in Policy - Password Generation for Undo Deprovisioning -
解决办法
In order to modify the settings in the above policies, it is necessary to create a new policy that leverages the built-in Generate User Password - PowerShell script module.
- In the Active Roles Console, as an Active Roles Admin, expand Configuration | Policies | Administration
- Select a new or existing policy container
- Using the menu at the top of the screen, select Action | New | Provisioning Policy
- Choose an appropriate name and then click Next | Script Execution | Next and select the Builtin | Generate User Password - PowerShell script module
- Set the desired parameters and then click Next
- Add the desired scope and then click Next | Finish
- After configuring and linking the new policies as desired, remove the linkages to the built-in policies.
NOTES:
- Do not modify the Generate user Password - PowerShell script content. Use the Policy Parameters to set the desired settings as noted above.
- It is not possible to modify the Built-in Policy - Password Generation policy found in Configuration | Policies | Administration | Builtin. Either create a new policy or copy the builtin Policy for your custom requirements. You may also Block or remove the Policy Scope for the Builtin if the new Policy will replace the Builtin one.