Description – Google Message Security Batch Reference Guide User Manual
Page 262
Batch Commands
265
Description
Updates the password policy for an existing organization, including sub-
organizations if cascade is enabled. If a PMP password policy configuration does
not exist for this organization, one is created with the default settings.
•
•
min_length -- The minimum number of characters in the password. The
values can range from 1 to 10.
Default: min_length=6 (for new users of PMP password policy configuration)
Default: min_length=1 (for current PMP users who have migrated to the PMP
password policy configuration)
•
required_complexity=no or required_complexity=null -- The PMP password
policy’s complexity rules are not enabled. When a password is changed, it will
not be compared against the complexity rules.
Default: required_complexity=no (for current PMP users who have migrated to the
PMP password policy configuration)
•
‘required_complexity=yes’ -- The PMP password policy’s complexity rules are
enabled. If the new password does not match these rules, the new password
will be rejected. This is the recommended setting. For more information on
complexity rules see the Notes below.
Default: required_complexity=yes (for new users to the PMP password policy
configuration)
•
max_login_attempts -- The maximum number of allowed login attempts. The
values can range from 1 - 10. If the value is null, no limit is placed on the
number of login attempts. The login attempts are checked every 10 minutes.
The recommended setting is to match your company’s password policy.
Default: login_attempts=null
•
lockout_period -- The lockout duration, in minutes. The lockout is triggered
once the invalid log in threshold is reached. The values can be 1 - 999. After
this period, a user is allowed to resume attempting to log in to the login
window. If the value is null, an administrator will have to reset this value
before the user can successfully attempt another login.The recommended
setting is to match your company’s password policy.
Default: lockout_period=10
•
password_history -- The number of stored recently used passwords. The
values can be 1 - 24. If 0, a new password is always accepted. New
passwords can not match passwords in the password history
Default: password_history=0
•
max_password_age -- The number of days this password will be valid. After
this date, the password must be changed. On the final maximum day, the time
of day the password expires is the same time of day used when the password
was created. The numeric values can be 1 - 999. If null, the password never
expires.