Skip to main content

Enterprise password management window

Path: Administration > Configuration > Enterprise Password Management

With the Enterprise Password Management window, you can set parameters for passwords used in Netsmart Homecare. You can define password lengths, acceptable characters and their combinations; set the number of days before a password expires; select the number of unsuccessful login attempts a user can make before the system locks them out. These password settings conform to HIPAA privacy and security regulations.

Note: These defined settings apply to all Business Units in the database.

Setting Description

Allow ability to set minimum password length

Enter the minimum number of characters users must include in their passwords.

Forbid login name from use in passwords

Select this check box to forbid using login names as passwords.

Number of required character classes

Enter the minimum number of character classes users must include in their passwords.

Character classes are lowercase alphabetic characters (a - z), uppercase alphabetic characters  (A - Z), numeric characters (0 - 9), and non-alphanumeric characters (!, #, &, etc.).

A password must contain representatives of at least the number of character classes you select to be valid. For example, if you define two character classes, a user would need to use two parameters as described above while keeping in mind the required length.

Reject easy to guess passwords

Select this check box to reject easy-to-guess passwords that users try to set. This setting rejects passwords fewer than six characters, are based on English words, or are otherwise easy to guess.

Administrative supplied password. Require user password changes after login

Select this check box to require users logging in with a password given to them by their administrator to change their password before allowing them to use the application.

Size of user's password history

Enter the number of passwords to retain in password history. Users are not allowed to reuse a password that is in password history. Setting this value to 0 disables this feature.

Password expiry period for admin (days)

Enter the number of days after an administrator's initial login that the user's password expires.

 Password expiry period for non-admin (days)

Enter the number of days after a non-administrator's initial login that the user's password expires.

Password expiry warning period (days)

Enter the number of days before the password expires when the user will receive a warning at each login prompting to change the password. This number cannot exceed the number of days in the expiry period. Setting this value to 0 disables this feature.

Password reset history

Select All to include all password resets in this report.

Select Begin from to include all password resets as of a selected date. Specify the date in the field provided.

Authentication failures before lockout

Enter the number of failed login attempts a user can make before the user's account is locked. If an account is locked, an administrator must unlock it. Setting this value to 0 disables this feature.

Forbidden password strings

Enter strings of characters that you do not want users to be able to include in their passwords. Case-shifted variants of the strings you enter will also be excluded from user passwords.

 

  • Was this article helpful?