Users

Users exist in either the Active Directory (AD) (Enterprise Edition) or Active Directory Application Mode (ADAM) and the local computer user store (Station OASyS, myOASyS). Basic guidelines for users include:

• Complex password requirements.

• Password expires where appropriate.

• All usernames and passwords are unique – no shared passwords.

• Users created within the AD may be configured with additional restrictions including Logon Hours, and restrictions as to which computer they may log in from.

  Note: Users should only hold membership in a single authority. Each authority may include membership in one or more permissions. If a user requires a combination of permissions, which are not represented by an existing authority, a new authority should be created with the correct permissions.