Received: from BN6PR16MB3153.namprd16.prod.outlook.com (2603:10b6:405:81::35) by BL0PR16MB2612.namprd16.prod.outlook.com with HTTPS; Wed, 13 Jan 2021 17:57:30 +0000 Received: from BN6PR16MB3284.namprd16.prod.outlook.com (2603:10b6:405:76::31) by BN6PR16MB3153.namprd16.prod.outlook.com (2603:10b6:405:81::35) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3763.9; Wed, 13 Jan 2021 17:57:29 +0000 Received: from BN6PR16MB3284.namprd16.prod.outlook.com ([fe80::99a0:acbf:5ba0:9770]) by BN6PR16MB3284.namprd16.prod.outlook.com ([fe80::99a0:acbf:5ba0:9770%7]) with mapi id 15.20.3742.012; Wed, 13 Jan 2021 17:57:29 +0000 From: Rickie George To: Microix Support Subject: Microix Password Requirements and Risk Thread-Topic: Microix Password Requirements and Risk Thread-Index: Adbp1STC6M9CMvtuRIi/iTgsEgjClQ== Date: Wed, 13 Jan 2021 12:57:29 -0500 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Exchange-Organization-AuthAs: Internal X-MS-Exchange-Organization-AuthMechanism: 04 X-MS-Exchange-Organization-AuthSource: BN6PR16MB3284.namprd16.prod.outlook.com X-MS-Has-Attach: X-MS-Exchange-Organization-Network-Message-Id: 8e1e63b1-74ef-4dbd-21a5-08d8b7ecb198 X-MS-Exchange-Organization-SCL: -1 X-MS-TNEF-Correlator: X-MS-Exchange-Organization-RecordReviewCfmType: 0 x-ms-publictraffictype: Email authentication-results: microix.net; dkim=none (message not signed) header.d=none;microix.net; dmarc=none action=none header.from=microix.net; x-originating-ip: [96.38.245.10] x-ms-office365-filtering-correlation-id: 8e1e63b1-74ef-4dbd-21a5-08d8b7ecb198 x-ms-traffictypediagnostic: BN6PR16MB3153: x-ms-oob-tlc-oobclassifiers: OLM:6790; x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:-1;SRV:;IPV:NLI;SFV:SKI;H:BN6PR16MB3284.namprd16.prod.outlook.com;PTR:;CAT:NONE;SFS:;DIR:INB; x-microsoft-antispam: BCL:0; x-ms-exchange-antispam-messagedata: =?us-ascii?Q?IQSAUZIfPU2OlUQCNyz8//tH5dfpf219toYCCWNVjf4acg3sY3hTCpDUtOHL?= =?us-ascii?Q?5dlOXzlDTSgdq95iPtS10jCIrRkNM6r7Tdia3ghpvYmhQdFAUp5upZFxMJ9r?= =?us-ascii?Q?K/yAXvUcVgayZGxHBYjbHn+RVCd4upZBWsRcKU9SC22p3vDnXhzTpaVU9BYC?= =?us-ascii?Q?ayA4uJuWHm9B68UU185GC9sNySzOF41D88Eszcb2jy7c3mvFpH+dCF9B/m8y?= =?us-ascii?Q?JWO49knTrF/b4NhII0X+UH1pqAgfhnFtq/GO/tEQm/HYWRVp8UIC/56AdgLC?= =?us-ascii?Q?64HEywVZpGrx8aChQc4KkkZ+2Pa3GNQeuxPPa0MMIe6c3YDcMiPeXap0vSi/?= =?us-ascii?Q?XETAp/QLJSvAJEFulnz6/AJPuBL/DamraY0ClfLYghKDLya/ndggX6TOZGQ4?= =?us-ascii?Q?vswmotVP89L59+Oo3vdcdYXFbeVWwJHXWxRMmTRxMOH34raaCYBXGJeTAV++?= =?us-ascii?Q?Fafdpjtrf6tox+vCOT2djmnn27ruhffxeYktTayYul2mkY8aeWDAJ+HyTBZR?= =?us-ascii?Q?YSm7tyB8SNAqxmEWM1/HhKavVFFF8YZdBM7CXr18wx96eAQ3qpMq0yJf22gA?= =?us-ascii?Q?txaF9WH5BpmOR859O93ouqAtrPNRp19uYCC53oJpJYh/CGoWFFs0te8fB3Df?= =?us-ascii?Q?xZob1Eb5Iz8d3eka7fBOQjWkDCaGitCVFoZ4yv/8iTdom0ad2m9kWLUETAHi?= =?us-ascii?Q?CMy9/06oZKAQfY01LbwOFr3FRxnsiCKcAVS83hYGP8DwVm8Qo0DBGRDhq2EY?= =?us-ascii?Q?9i0WhJtuRT8sjzm14nudaGujOWXQxhsQvDfPQyr0sthcqB3AFk2dwUoeFNXr?= =?us-ascii?Q?tgUp5XYXHd2Oz03OTGSPVENIcn5PjwlDdDSpQ+PJQkkspx2rQvngXcVQq0uQ?= =?us-ascii?Q?chsh0LplVMl65Ve2avV5vIZcib5bStppxz52mO9hDFrp7WAwXvkAUgI/fHY1?= =?us-ascii?Q?tsmjA4OCF+gsD5aShl307DKr8fCHShVBdWsZFcdoZ5o=3D?= x-ms-exchange-crosstenant-network-message-id: 8e1e63b1-74ef-4dbd-21a5-08d8b7ecb198 x-ms-exchange-crosstenant-originalarrivaltime: 13 Jan 2021 17:57:29.2077 (UTC) x-ms-exchange-crosstenant-fromentityheader: Hosted x-ms-exchange-crosstenant-id: 047ca1d7-5314-4422-8db2-9017a42a0ba4 x-ms-exchange-crosstenant-mailboxtype: HOSTED x-ms-exchange-crosstenant-userprincipalname: fkMj46o4TcQu9xYLFC4uhY4JtC9FKxFphfAYbMegYL47aFCe+BcdR0F4tWONL9m6UBdDLthQ51IqNosweUQB0g== x-ms-exchange-transport-crosstenantheadersstamped: BN6PR16MB3153 x-ms-exchange-crosstenant-authsource: BN6PR16MB3284.namprd16.prod.outlook.com x-ms-exchange-crosstenant-authas: Internal x-ms-exchange-transport-endtoendlatency: 00:00:01.4958974 x-ms-exchange-processed-by-bccfoldering: 15.20.3742.012 X-Microsoft-Antispam-Mailbox-Delivery: ucf:0;jmr:0;auth:0;dest:I;ENG:(750128)(520011016)(706158)(944506458)(944626604); X-Microsoft-Antispam-Message-Info: U550SyqfRtVQv8UEFUqNeENf9/gOvq07G83Fq3yKa0f4h1Nx/LYdtMZIdFHdkO5dzzQU6GjfRwUcQhVU327boIxehP/JM5uglkfik2S5TjANZ+5YBSgKeQ/Zq3k8Kcy7qDBQ98BEdD0ClxpfAAKVvPRjUshYjHldXFHQ7IsU05GbCUJMG4FfK7j7d/9666hhwGGAZu7z4rFtbWlYSN9Z4IVLsxNPADsQl/SUj1w9BP6PlxoHs5AlA/Kdx9IhqA1WCKsmwRl0iDVnobrlP8y2MCHqIGuGwZdn9H5vRDdZToDFX/h1mq69dMzUF+oUpW+31jX5Nsmlmyep17Fg231QhRziHhqjAITHdJ628yejY5es4qRxDwPpd0C/2XA36H3NmUFs+jW7yl5Mf+n4ErBC/M3C0E45KRFi5X7zgBiwphI= Content-Type: text/html; charset="us-ascii" MIME-Version: 1.0

Hosting Server/On-Premise Deployment (Windows Desktop Application)

  • Active Directory Authentication – all password polices are derived from Windows Active Directory
    • If user account is hacked, intruder is limited to the network resources set forth by Active Directory
  • Local Password Authentication – all password polices are derived from Workflow Modules Client Application
    • Currently no option for password expiration
    • Password rules
      • Minimum of 6 characters
      • Must contain letters and number
      • Case sensitive
    • If user account is hacked, intruders do not have access to network resources other than the Workflow Modules User Interface

 

Dedicated Hosting Server/On-Premise Deployment (IIS Web Application)

  • Active Directory Authentication– all password polices are derived from Windows Active Directory
    • If user account is hacked, intruder is limited to the network resources set forth by Active Directory
  • Local Password Authentication – all password polices are derived from Microix Web and Windows Application
    • Currently no option for password expiration
    • Password rules
      • Minimum of 6 characters
      • Must contain letters and number
      • Case sensitive
    • If user account is hacked, intruder do not have access to network resources other than the Workflow Modules User Interface

 

Multi-Tenant Hosting Server  (IIS Web Application)

  • Active Directory Authentication– Not Available
  • Local Password Authentication – all password polices are derived from Microix Web and Windows Application
    • Currently no option for password expiration
    • Password rules
      • Minimum of 6 characters
      • Must contain letters and number
      • Case sensitive
    • If user account is hacked, intruder do not have access to network resources other than the Workflow Modules User Interface