Password Policies and Information
Important: New Network Account Password Reset Process
In order to protect personal identity and comply with Identity Theft Red Flag Rules, effective Monday, August 24th, there will be a significant change in the Network (email and Portal) password reset process.
The Support Center will no longer reset a password based on just an email request.
ALL PASSWORD resets must be confirmed by personal contact.
Students:
- You must present to the Support Center a valid photo ID. This can be an SMCM ID card, driver’s license or any other identification with a reasonably current photo.
- During our regular business hours of Monday – Friday from 8:00 a.m. to 5:00 p.m. we will be able to reset your password immediately if you come to the Support Center with appropriate photo identification.
- If you come to the Support Center after regular business hours (evening and weekends) and your identification is verified, your password will be reset during the next business day.
Faculty and Staff:
- You may call the Support Center for a password reset during our regular business hours. Once we confirm your identity your password will be reset.
- If you contact the Support Center during the evening or weekend hours with a reset request, a work ticket will be created and a staff member will contact you during the next business day to reset your password. This could result in a delay of up to 48 hours in resetting your password since staff is not available on the weekends.
In 2008 CTSS implemented the Self Service Reset Password program (SSRPM). This program allows users to reset their own password in the event they forget it or have allowed their password to expire. Taking a few minutes now to sign up for the Self Service Reset Password program will save you time and aggravation in the future.
Please go to https://pwr.smcm.edu and enroll in this program.
If you have questions concerning this program please call the Support Center at 240.895.4357.
Note: If you have forgotten your password altogether, you may reset it here.
Click here to download this document as a printable PDF.
Rationale
The object when choosing a password is to make it as difficult as possible for someone to make educated guesses about what you've chosen. This leaves them no alternative but a brute-force search, trying every possible combination of letters, numbers, and punctuation. A search of this sort, even conducted on a machine that could try one million passwords per second (most machines can try less than one hundred per second), would require, on the average, over one hundred years to complete.
Policy
Network (email) passwords are set to expire every 90 days. All passwords are restricted to a minimum of 8 characters and should contain alpha number characters.
New Passwords
After receiving a new password from Computer Center staff, it is very important that you change it during your first login.
What Not To Use
- Don't use your login name in any form (as-is, reversed, capitalized, doubled, etc.).
- Don't use your first or last name in any form.
- Don't use use your spouse's or child's name.
- Don't use other information easily obtained about you. This includes license plate numbers, telephone numbers, social security numbers, the brand of your automobile, the name of the street you live on, etc.
- Don't use a password of all digits, or all the same letter. This significantly decreases the search time for a cracker.
- Don't use a word contained in dictionaries (English or foreign language), spelling lists, or other lists of words.
What To Use
- Do use a password with mixed-case alphabetic, numeric and special characters.
- Do use a password that is easy to remember, so you don't have to write it down.
- Do use a password that you can type quickly, without having to look at the keyboard. This makes it harder for someone to steal your password by watching over your shoulder.
To change your password using a Windows system connected to the network
- Log on to the college network
- Press and hold the Ctrl and Alt key at the same time and then press the Delete key.
- A screen will appear
- Select Change Password
- Enter your old (current) password, type in the new password, then retype the new password to confirm that you typed it correctly, then click OK.
To change your password using a Macintosh system connected to the network
Mac users are advised to change their password via Webmail. Note: Mac users need to use Safari instead of Internet Explorer. Use the instructions found in the next section. To change your password via Outlook Web (Webmail) Access below or:- For Faculty - Contact your Division Instructional Technologist.
- For Staff/Students/HSMC- Contact the Helpdesk.
To change your password via Outlook Web Access (Webmail)
- Login to your email account via the Web.
- Click on the options button located in the window to the left of your screen. (If your view is set up to show folders, the options button can be found on the left of your screen at the bottom. It is the last button on the right in this window.)
- Scroll down and click on change password
- The Internet Service Manager window will appear.
- Enter your domain (SMCM (HSMC-NT for Historic St. Mary's City), press the tab key.
- Enter your Account (username i.e. jdsmith), press the tab key. Note: if the domain field is not available, use your entire email address, i. e. jdsmith@smcm.edu
- Enter your old password, press the tab key
- Enter your new password, press the tab key
- Confirm your new password
- Click OK
- You will receive the message “Password Successfully Changed”
When you are prompted to change your network password these guidelines will assist you with the procedure. If you would like additional information on password security please review the SMCM Appropriate Use Policy. The SMCM Appropriate Use Policy addresses the need to maintain the confidentiality of your password. If you have critical data and/or sensitive information in your account, please make every effort to follow the password guidelines and keep your account(s) secure.
Password Complexity Guidelines
- Cannot contain your name or your user name
- Must contain at least eight characters
- Must contain at least three from the following four groups of characters:
- Uppercase letters
- Lowercase letters
- Numerals
- Symbols - are characters not defined as letters or numbers, for example, ! @ % *
A sample password might be: P@ssw0rd.
Password Change Notification
You will receive a notification when your password is due to expire in 7 to 14 days. When you receive this notification, it is a good practice to go ahead and change your password. Should you neglect to change your password and it expires, you will be locked out of the network. This will require you to contact the system administrator for assistance. Please call the Support Center at x4357 if you have any questions regarding this process.
