Re: password reset required after migration to power 10 (v7r3 to v7r5)

Hello,

Am 17.03.2025 um 14:12 schrieb smith5646midrange@xxxxxxxxx:

I read the attached article and IMO, that it the dumbest thing I have ever read.

These are harsh words. What exactly is triggering your perception?

Saying to never change ANYONE'S password because a few people can't remember a new password or it will be similar to a previous password is crazy.

I'm not saying no to never change anyones password ever. I'm saying that changes should just not be enforced by a simple timer. If a user wants to change his password, he should be allowed to do so.

Users will try to outwit the system, to get away with the least change ever. No matter rules you impose. And the more rules you impose, and the more often a user needs to come up with trying yet another possible password, becoming more and more upset about this obstacle, hindering him from doing actual work.

Forcing repeated changes makes user's life miserable and provides no additional security, unless the user had a postit stuck to his screen. Which he should not have done in the first place.

Also, read this: https://xkcd.com/936/

The more important part is disabling unused accounts.

Yes, definitely!

My account was still active and I was able to log in 3 years later.

For them, it was helpful, but is bad practice.

:wq! PoC