Best Practices for Passwords

Jason Doering wrote:

> JimmyV wrote:
>> Thanks Jason.
>>
>> I had hoped to get more feedback from people.
>>
>> Can I implement Password policies on a Handheld just as I can for a PC?
>> Complexity, length, etc?
>>
>
> Have a look at screen shots in the documentation:
> BlackBerry Security Policy:
>
http://www.novell.com/documentation/...9.html#ajla0a2
> Palm Security Policy:
>
http://www.novell.com/documentation/...9.html#ah36cbk
> PocketPC Security Policy:
>
http://www.novell.com/documentation/...9.html#ah36cc6
>
> As stated before, I have my Palm and PocketPC settings to use the
> eDirectory password. This way, it inherits whatever requirements I have
> set for that, and so far my users have preferred this to a separate
> password for their device.
>
> The first time a user syncs a device, it prompts them to enter the
> eDirectory password. If a password already exists on the device, the
> user gets prompted to enter the existing device password and then the
> eDirectory password. In either case, the device password then gets set
> to the eDirectory password. When the eDirectory password gets changed,
> the user will need to enter the old device password and the new
> eDirectory password.
>

Having done the both IP only version and the regular desktop sync I can tell
you that the user administration is probably not similar enough to what you
have been used to with desktops. Most handhelds (of any kind) are not
capable of multiple profiles (multi-user) on the device. So the catch is a
single user and single profile of that user on a handheld is going to have
the device access (NOT THE PROFILE) password set to the eDir password. If
another user were to need to login to the device and the eDir controls are
in place then the device access (power on password) would change to that
user. The profile would not change nor would the devices relationship with
anything it sync's with.
Sorry - long answer and late. This is not a very active forum.