How to set password policy for apps users

Hi All,
Can anyone please help me.
I am working on apps 11i.
How to set password policy for users
Thanks

Check Note: 189367.1 - Best Practices for Securing the E-Business Suite
https://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=189367.1

Similar Messages

How to set password expiration for EBS users

how to set password expiration for EBS users .
Regards .

Please follow below steps:-
This is available starting in RUP4.
The script to expire all passwords in the fnd_user table is $FND_TOP/patch/115/sql/AFCPEXPIRE.sql.
It can be executed from SQL*Plus or as a Concurrent Program: sqlplus -s APPS/ @AFCPEXPIRE.sql
or Submit concurrent request: CP SQL*Plus Expire FND_USER Passwords
This script sets the fnd_user.password_date to null for all users which causes all user passwords to expire.The user will need to create a new password upon the next login.
Thanks,
JD

How to disable password policy for App ID's

Hello there,
We have Sun ONE Directory 5.2 Patch2 version running on Solaris 8 as Master on 2 servers. I have somany application id which is created under separate branch of the tree. I want to by-pass the password policy for all the id's under specific branch.
Can someone please help me how to get this done. I appreciate anyone respnse.
Thanks
SS

*Click the (empty) input field on the web page to open the drop down list
*Highlight an entry in the drop down list
*Press the Delete key (on Mac: Shift+Delete) to remove it.
*http://kb.mozillazine.org/Deleting_autocomplete_entries
* Tools > Options > Security: Passwords: "Saved Passwords" > "Show Passwords"
* Tools > Options > Privacy > History: "Remember search and form history"
* https://support.mozilla.com/kb/Remembering+passwords
* https://support.mozilla.com/kb/Form+autocomplete

How to 'overrule' password policy for one user ?

hi,
i am system administrator on our ECC 6.0.
we have 4 clients, test and production.
so i have 8 users, not everyone has the same password (for some reasons).
when i want to change the password i get the message that the passwortd cannot be on of the
last 5 passwords.
well, i want to set the password the same for ALL of my 8 users.
how can i 'overrule' the message, so that i can change the password ? any ideas ?
best regards, Martin
Edited by: Julius Bussche on Mar 28, 2011 6:46 PM

>
Florian LINTNER wrote:
> But should we really publish such illegal things like USRPWDHISTORY?
What is illegal about table USRPWDHISTORY. It's a regular table so to think that if you don't mention it on public forum then nobody will find it is a bit naive.
There are usually 3 reasons why you have to do some dirty trick: you want to do something wrong, there is a technical limitation in solution or there is something serious wrong with the solution. In my experience the first option is the most common and this case looks to me like the first option. It's not clear from your message what is the purpose of those users but as it was mentioned you can change their type or maybe you can use a different authentication method for them (certificates or SSO) to avoid password issues.
Cheers

Different Password Policy for Different User Groups in ACS 4.2

Hi All,
Can some one provide a solution for the below requirement?
We do have ACS 4.2 appliance managing firewalls of different clients. The users are common i.e, helpdesk administrators. One of the client came up with setting different password policy for managing their devices i.e, the client wants to have min 15 characters as password length. We do have currently 8 characters as min password length. Can we change the password policy to min 15 characters only for managing the firewalls of this client whereas for all other client firewalls we feel better to have 8 characters as min password length?
It seems that these password policies are global & affects all the users.
This is something like, having two sets of password (for each user) policy depending on the client which he is going to manage.
For my knowledge, i think that this is not possible. But, thought to cross-check with experts!
-Jags.

Hi jags,
Yor're correct. Password policy on ACS will affect all internal user. We can't create different password policies for diferent clients/connections/set_of_users
Password validation options apply only to user passwords that are stored in the ACS internal database. They do not apply to passwords in user records in external user databases; nor do they apply to enable or admin passwords for Cisco IOS network devices.
HTH
Regards,
JK

How to implement password policy for a software in oracle (sql) forms & reports 6i ?

Hi all , I have to implement password policy for an already existing software which was created 2 to 3 years before.
What exactly i want to do is I must alert the user every month to change his/her password. I have no idea about it.
Can anyone help me how to start with it? Or can you provide me the links where i can learn & implement in the software?
Oracle Forms & Reports Builder 6i.
Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production.
Thank You.

You can try this:
Establishing Security Policies
Using database policy, you can force user to change password with Oracle forms 6i.
Regards

How can I set OIM password policy for OID Users.

Hi,
For me the target resourec is OID. When I create users in OIM, they get provisioned to OID. Their password also gets stored in OID.
Now, I have a password policy in OIM. In that policy, the password exipration day is set to 28 days. After 28 days, the user's password will expire in OIM. Is there any way that password will also expire in OID too, so that user will not be able to login in OID?
Thanks in advance.

You need to do the following.
1. Find the attribute in OID that determines the disable date.
2. Add a field to your provisioning process definition form.
3. Using a pre-populate adapter, use an input of your oim user account expiration date, and convert that to the format OID uses.
4. Update your lookup for provisioning attributes to include this new field to map the field name to the OID attribute.
5. Create an "Updated" task for this field so that when it gets changed, the new value is pushed to OID.
6. Create a user form trigger value for the field that maps to the oim user account expiration field. For this trigger, add a task to your oid provisioning process that does the same tasks as your pre-populate adapter to determine the new date value and pass it to the field on the process form.
Now when the OIM expiration date changes, this value will be passed to OID, and also when the account is first created.
Does this work for you?
-Kevin

Setting password expiry for all users in oracle apps R12

hi,
i have OS RHEL 5,Oracle apps: 12.1.1
now i want to set the password expiry for all the users in oracle apps to 60 days..
can some on please guide on how this could be done.
It is urgent,your help is appreciated.
regards,
Milan Rathod

Hi Milan;
Check below thread
How force users to change passwords every 60 days
How force users to change passwords every 60 days
PS:Registered: Sep 24, 2010
Total Posts: 38
Total Questions: 30 (28 unresolved)
Please change your thread status to anwered which you already get answer for your issue
Regard
Helios

Set Password Policy For System Administrator Account in UCCE Servers

Hi All,
We want to setup a password policy ( expires in 30 days) for the local administrator account in all our UCCE servers.
We found that the all the UCCE services are running in local system account except logger and distributor( these services are running in domain user account).
Is it a supported configuration ? Are there any impacts with this setting ?
Thanks a lot in advance!
Thanks and Regards,
Thammaya

Hi,
what is the UCCE (~ ICM) version? Is there OS hardening applied?
By the way, yes, if you mean the local "administrator" account, you can do whatever you want to do with it, provided you don't lock yourself out - this should not happen, naturally, having all ICM servers in the domain and you can always use the domain admin (or a user belonging to the domain admins group).
By the way, I don't really see the meaning of having a local administrator account being enabled. :-)
G.

How to set permissions like "For all users" with Sandbox

Hello!
Hello!
I am using Sandbox for Mac OS X Leopard and I've got a question to you:
How can I set up a folder to behave like the For all users folder in the users directory?
Greetings

Well, sandbox sets ACL's not posix permissions. The sticky bit is a posix permission. Sand box will allow you to do something similar to the sticky bit using ACL's, but the exact duplication of the sticky bit is not possible, but something just as useful or more useful can be easily implemented.
To set the sticky bit you will need an app called FileXaminer or the Terminal.app command line.
to set the sticky bit simply put "1" in front of the the permissions number when you run chmod on the command line, here is an example:
chmod 1775 /users/data/shared #assigns permissions 775 and the sticky bit#
chmod 775 /users/data/shared #assigns permissions 775 without the sticky bit#
note: note actual use of the chmod and chown commands will, in most cases require the sudo (super user do) command to be used with them. example:
sudo chmod 1775 /users/data/shared #assigns temporary super user priviledge#
The way I set my shared user's directories with ACL's is this:
first I created folder /users/data -permissions=777 (everyone).
I had three users so I created folders for each in /users/data:
/users/data/user1 #this is just example-substitute real user name#
/users/data/user2
/users/data/user3 #etc,etc,#
set the posix permission on each user folder 700 (owner:read,write,execute)
set the owner and group on each one accordingly:
chown user1:staff /users/data/user1 #substitute real user name#
chown user2:staff /users/data/user2
chown user3:staff /users/data/user3 #(etc,etc)#
Now each user has their own data folder they can read and write to at will (when they are logged in to their user account).
They can safely create and maintain their data and no one can delete it.
Since these are shared data accounts. other users will need to read the data, this is where the ACL's come in.
You will need to use Sandbox to place ACL's for each allowed user, on each of the user directories:
0: user:joe inherited allow list,addfile,search,add_subdirectory,readattr,writeattr,readextattr,writeextattr,readsec urity,file_inherit,directoryinherit
1: user:mary inherited allow list,addfile,search,add_subdirectory,readattr,writeattr,readextattr,writeextattr,readsec urity,file_inherit,directoryinherit
2: user:sue inherited allow list,addfile,search,add_subdirectory,readattr,writeattr,readextattr,writeextattr,readsec urity,file_inherit,directoryinherit
Basically with the above ACL's the only thing the allowed user can't do is delete files. They can copy files, they can add files, etc. This behavior is somewhat similar to what can be accomplished with the sticky bit, but much more controlled and structured. That is the beauty of using ACL's.
Using SandBox you can taylor the permissions as you see fit for each every user. You can set permissions for an administrator to delete files as well. You can take away or add permissions for each user as you see fit. let your imagination be your guide.
ACL's weren't meant to replace posix permissions, but rather to allow administrators to fine tune user permissions.
Kj

How to set DEFAULT GROUP for a user when I create a user manually thru pl/s

Hi Gurus,
I am creating portal user accounts and groups thru pl/sql calls to
portal.wwsec_oid.create_user_entry
portal.wwsec_api.ADD_USER_TO_LIST
I didn't find any parameters to set the DEFAULT GROUP for the users. I want to set the default group for all my users. I don't want to do it thru portal. Cuz, We have around 1600 users. Please post a reply if you have some info about how I can set this thru code.
Thanks
Raj

You can achieve that using 'wwsec_api.set_defaultgroup'....

How to set toolbar options for all users in Reader

Hi to everybody
I have istalled adobe acrobat reader on a PC and i'd like to hide the toolbar for all user (old and new users) of thes PC.
I'm using windows xp and acrobat reader 7.
I have try to chek the user's folder and system registry but i don't find anything usefull
How can I do that?
Thanks
Andrea

Hi to everybody
I have istalled adobe acrobat reader on a PC and i'd like to hide the toolbar for all user (old and new users) of thes PC.
I'm using windows xp and acrobat reader 7.
I have try to chek the user's folder and system registry but i don't find anything usefull
How can I do that?
Thanks
Andrea

How to set up ipad for elderly user

I want some ideas for setting up an iPad for my 89 year old father who has never used a computer and has some visual impairment. The only thing he wants to do is listen to audiobooks. I want the titles of the books to be no more than one click away from the desktop. I want him to be able to control the stop/start and volume with a clearly laid out dialog box on the desktop. Help please...

Hi,
I have been looking into this subject. We are buying my father-in law an ipad for his 91st birthday in two weeks. He had unsuccessful surgery for a detached retina a couple of years ago and so has vision (not too good) in only one eye. When we were researching how and if he'd benefit from an ipad (which he wants) we weren't sure, but then I read about VoiceOver that is built into every ipad. We're all very excited about it.
http://www.apple.com/accessibility/ipad/vision.html
Because you said they have a desktop, they can also set up Home Sharing between their desktop and the ipad if they have a wireless connection. If not, they just need an inexpensive wireless router and a little help setting it up. We're getting a $40 ish Netgear for him that we paid $80.00 for two years ago. They're practicall plug an play and need only cable modem box, which most have these days.
Your father/parents will be able to do more than listen to audio books. With an ipad he can do a lot more. He'll be able to read and hear newspapers, magazines, etc. There are many games/apps that he can buy that can exercise his brain. They will speak to him! Some months ago there was a thread that went on and on about how nurses/family membes who were finding that their senior parents/patients (some with Alheimer's) became more alert when working with someone on the ipad. It was encouraging. IF he has netflix he can watch movies on it. Your music might be on your computers from cd's. If they have music cd's at home, you can quickly upload them to their computer, put them in itunes, and sync them to the ipad, too.
VoiceOver will help with so many other things that are explained in the link I gave you earlier.
Please also check out you tube videos for using VoiceOver in the ipad. The setting up and usage videos are very good and many examples are given by blind people. (Seeing how VoiceOver even reads the apps that might be on the front page as fingers glide over them is great.)
Also, I'm not sure where you live. Many libraries have free e-books with or without audio that your parents can take out. I learned last week from someone looking for the same, that if you're in Canada there is something called CNIB where people with vision problems can get all the e-books they want. You might want to google it and see where you can get free -ebooks for your parents. Audio books can be expensive. The thread below
Please go to the link above and then check out you tube.
I wish my 86 year old Mom (vision is good) would use an ipad.
I hope this helps.

Is there a way to create a new user template so I don't I have to set each policy for new users in control panel?

hi,
I want conferencing, mobility, remote access, etc., to be automatically set to a defined policy so when I create a user, I don't have to go down the list to change the default from automatic to my custom policy. I don't want to edit the global
polices.
thanks,
rudif

Agree with Georg, you can do that using Powershell
To assign policy using Powershell, you can refer below link
http://blogs.technet.com/b/csps/archive/2010/06/06/refpolicies.aspx
https://blogs.technet.com/b/csps/archive/2011/07/13/agmanagingusers.aspx
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"

Reminder needed: how to set password protection for all uses of computer

It's been a long time coming, but I feel that I need to limit the access to all materials on a Mac running OS 9.2.
Is there a simple way that I can password protect the whole computer?
Thanks for your time - and stay cool!

Hi, Bruce -
Try using Multiple Users to do that. One of its features is password access to use any account.
This will provide a moderate level of security - however, a knowledgeable person will have little trouble defeating it.

How to set password policy for apps users

Similar Messages

Maybe you are looking for