Checking Password Validation
============================

Policy Server communicates with the Agent to collect check the strength of a
windows password

Add the Agent Action to a Policy
--------------------------------

#. Go to **Policy** in the top panel.
#. Go to **Policy > Node Policy** in the left Policy panel.
#. Click the **desired Policy ID** in Node Policy window.
#. Find **Agent Action**. Click **Assign.**
#. Find **Checking Password Validation** in the **Available** section. Select
   and drag it into the **Selected** section.
#. Click **Add.**
#. Click **Update.**

Checking Password Validation
----------------------------

#. Go to **Policy** in the top panel.
#. Go to **Policy > Node Policy > Agent Action** in the left Policy panel.
#. Find and click **Checking Password Validation** in the Agent Action window.
#. Enter in **Conditions**, optional settings.

Under **Plugin Settings:**

#. Select **On** or **Off** for:

   * **Display Account with Strong Password**: Specify whether to display an
     account with a strong password.
   * **Immovable Dialog Box** - Specify whether to lock Dialog Box in the
     center of the screen.

- The settings below may be defined for both **Logged On Users** and
  **Logged Off Users**.

#. For **Password Check Options**, select **None**, **Protection** (check for
   password), or **Strength** (Checks password against password policy. See:
   :doc:`../authentication/managing-users`)

   * For **Action**, select **Force Password Change** (Which will mandate a
     password to be added, or mandate a password is made compliant, depending on
     the main password check option chosen), or **Check Password Strength** (Can
     be selected to check password strength without additional action,
     regardless of the main password check option. See:
     :doc:`../authentication/managing-users`) .

#. For **Maximum Password Age**, Specify the period of time (*hours - months*)
   that a password can be used before the system requires the user to change it
   Enter ``0`` to Disable.

   * For **Expiry Notification**, Specify the period of time that users are
     notified before password expiration (*minutes - months*).

#. For **Username Exceptions**, Enter Username(s) to be excluded from password
   validation check.
#. For **Execution Interval**, adjust Periodic Interval. (*seconds - months*)
#. Click **Update.**