BusinessObjects Enterprise Administrator's Guide

User restrictions

User restrictions ensure that Enterprise users create new passwords on a regular basis. You can enable the following options:

• Must change password every N day(s)
• Cannot reuse the N most recent password(s)
• Must wait N minute(s) to change password

These options are useful in a number of ways. Firstly, any malicious user attempting a dictionary attack will have to recommence every time passwords change. And, because password changes are based on each user's first logon time, the malicious user cannot easily determine when any particular password will change. Additionally, even if a malicious user does guess or otherwise obtain another user's credentials, they are valid only for a limited time.