Quote:
Originally Posted by RKDinOKC
Microsoft is turning off password expiration. They say it is better to have one complicated password you keep than always changing it.
The other admin, and network guy are freaking out saying it s going to break a bunch of stuff and we have NEVER implemented password expiration.
|
NIST had that in their guidelines a while ago. Changing your password often makes you more vulnerable. Some people freaked out here when I said we would be moving that way. We require a long phrase and they don't expire.
We have one vendor that requires monthly changes but they don't check the previous password so everyone uses the same one over and over.
In years past, people never used passwords on their computers. Maybe he would like to go back to that? Lotus 123 on a 80286 while you are at it?