How Many Schools Reset Passwords

[Gongalong]

Hi folks,

 

Just curious how many of you reset passwords at the start of the school year, or do you leave them as per previous year?

 

(This is a poll, just in case it doesn't show up for mobile users)

[MrFrostmaul]

We have Students passwords to expiry every 365 days so kinda have it start of each school year (depends on when they changed it last though). - Staff expire every 90 days.

[6Foot2]

Student passwords are changed the first time users log on. After that students are not required to change their passwords (although they can if they want to) This may change soon: We might be deploying new staff and student password policies if the Head agrees.

[robmal]

Every 90 days - staff and students. A lot of whinging, but they have to get on with it.

[ITGURU]

All staff and students set their password once and thats it. If they want to change it they come and see us. Cuts down on the number of calls about students cannot login due to username/password combination and more often or not its usernames they forget rather than passwords!

[MrFrostmaul]

All staff and students set their password once and thats it. If they want to change it they come and see us. Cuts down on the number of calls about students cannot login due to username/password combination and more often or not its usernames they forget rather than passwords!

 

Luckily for us, we don't get almost any calls for password resets etc.

[witch]

Student passwords - never

Staff set to change three times a year - roughly once a term

[Gongalong]

We must have had close to 100 resets already, because students have just forgotten them over the Summer hols. I think there's mileage in resetting all student passwords. I've asked the Teaching Staff for feedback but got nothing.

[Marshall_IT]

Gets the latest advice on passwords from GCHQ.

 

http://www.independent.co.uk/life-style/gadgets-and-tech/news/stop-using-difficulttoguess-passwords-uks-spying-agency-gchq-recommends-10497048.html

 

Not quite sure exactly how to take it as I feel they have a vested interest in being able to easily crack passwords.

 

However, the advice is built on research Microsoft and Google have conducted.

 

We don't force changing of passwords for students but still got around 70 resets this first week back.

 

Staff complain like hell as they need to reset them every 90 days and I just increased the complexity from 5 chars basic to 8 and complex.

[Oaktech]

Gets the latest advice on passwords from GCHQ.

 

Stop using difficult-to-guess passwords, UK's spying agency GCHQ recommends - News - Gadgets and Tech - The Independent

 

Not quite sure exactly how to take it as I feel they have a vested interest in being able to easily crack passwords.

 

However, the advice is built on research Microsoft and Google have conducted.

 

We don't force changing of passwords for students but still got around 70 resets this first week back.

 

Staff complain like hell as they need to reset them every 90 days and I just increased the complexity from 5 chars basic to 8 and complex.

 

What they are suggesting is exactly what XKCD suggested some time ago...

 

Incidentally, we have staff passwords set to expire every 60 days and to require complex passwords (edict from our LA) Student passwords do not expire but are reset to the student's class details every year.

[ataylor]

We have been asked to enforce a 30 password policy for staff (which is not very popular!)

 

As for students, I had a Que of 20 year 8's stood outside my office last week.

[Arreks]

Every 60 days for Staff for us, but not Students.