Change Password Considerations

New and Existing Accounts

It is necessary to change password settings on occassion. Here I will cover how to change password settings for existing users as well as considerations for setting up a new user account and how local machine security settings can affect these.

To manage accounts and passwords you need to open a management console using these steps:

Start | Run | type in: mmc
File | Add/Remove Snap-in... | Add
Scroll down and select Local Users and Groups | Add
Select local computer radio button | Finish
Close add snap-in window | OK
Expand Local Users and Groups in left pane

User Management Console

The management console is pictured in the Graphic above. Selecting the Users directory (Folder) in the right you can right click and select New User to add a user.

In the left window you may select a specific user, right clicking on that individual for the menu, you may reset the password from here.

Go To----User Profile Page------->

-----Managing Accounts with Group Membership----->

Local Machine Security Considerations

Using local machine security you set the password standards that will be applied to all accounts on the computer.

To some degree this review ought to be first but on occassion it has no impact or you just choose to use the system default so the settings aren't adjusted. To manage local machine password setting you must be logged in with an administrators account.

Get to Administrative Tools either from the All Programs menu or via Control Panel and select Local Security Policy.

Local Security Settings

Expand as shown above to reveal your options for enforcing password policies.

Password History refers to the ability to track what passwords have been used, insuring the password changes are original.

Maximum and Minumum password age define the time frame the password must be chanded in, i.e...at least every 60 days but no more than 70. Setting the Max password age to zero will allow the password to never expire.

Minimum password length aids complexity as does enabling the complexity requirement.

Overall complexity requires the use of three of these four:


 one number (0 - 9)
 one special character(! # $ %) 
 one capital letter (A - Z)
 and one lower case letter (a - z)

Storing the password encrypted adds another level of protection.

New Account Considerations

You see here I have continued on from the first graphic and chosen to add a new user, Bob. You are asked to provide an initial password. Work through that and go back and select the properties of the user.

Here you will manage password options on the General tab and overall permissions on the Members of tab.

Using the Management Console you may change passwords for existing accounts, and manage specific password requirements...you can take this a step further by employing local machine security settings.

footer for change password page