• Report an Incident
• Incident Information
• Self Service Security
• Services and Products
• Best Practices
• Policies, Guidelines and Procedures
• Security Awareness, Training and Education (SATE)
• Vulnerability Information
• About EIS
• What's New

---

Active Directory (mail@UCSF) Password Protocols

To safeguard electronic information resources OAAIS has instituted strong password protocols for Campus Active Directory (AD)/mail@UCSF email accounts including Outlook Web Access. Enforcement will take place when new passwords are created.

This move anticipates adherence to consistent password protocols throughout the UCSF community. To learn more about the standard visit the Enterprise Information Security webpage.

Active Directory/ mail@UCSF Passwords:

• Must contain a minimum of 7 characters.

• Cannot contain:

  • The user's account name;
  • More than two consecutive characters of the user's full name.

• Must contain characters from three of the following four categories:

  • English uppercase characters (A through Z);
  • English lowercase characters (a through z);
  • Base 10 digits (0 through 9);
  • Symbol characters (!, $, #, %).

• Changes will be required every 180 days.
  You must wait for 8 password cycles to pass before re-using a password. Your password can be changed once every 8 days.

• Your account will be locked after 5 incorrect entries.
  An account that has been locked in this manner will be locked out for 15 minutes.

• Email reminders will be sent to your account at regular intervals to notify you of the pending password reset.
  Reminder notices will be sent out at 21, 14 and 3 days prior to expiration.

EXAMPLES

Based on the account username: JDemoacct

Meets Requirements

• BF4ever! - exceeds minimum number of characters; includes characters from all categories
• !Oceans! - exceeds minimum characters; includes characters from 3 of the 4 categories
• 2bRnt2B - meets minimum characters; includes characters from 3 of the 4 categories

Does NOT Meet Requirements

• %Dem01@ - Containes more than 2 consecutive characters from username
• acct!!! - More than 2 consecutive characters from username, includes characters from
                only 2 of the 4 categories
• 2brnt2b - Contains only 2 character categories

More information can be found on our password reset FAQ's page.

Please tell us what you think of our new website