Self Password Reset

Password Policy:

• Passwords must contain at least seven characters, at least three of which must be alphabetical, and at least three of which must be numeric
• No password may contain the user name
• Passwords are valid for up to 90 days
• Passwords must be at least one day old before they are changed, to prevent users from changing their password many times to fill up the password history.
• After a password has expired, users may still log in twice, to give them a chance to change the password
• After three incorrect attempts at logging in, the account is suspended for 30 minutes, after which the user may try to log in again