Password Prompts

Use the group policies under Password Prompts to customize the prompts displayed when Active Directory users are prompted to provide their password.

Set Account Disabled Error Message

Customize the text displayed during login if a user is denied access because the user’s account is disabled. This group policy modifies the pam.account.disabled.mesg setting in the agent configuration file.

Set Account Expired Error Message

Customize the text displayed during login if a user is denied access because the user’s account has expired.

This group policy modifies the pam.account.expired.mesg setting in the agent configuration file.

Set Account Locked Message for adpasswd

Customize the text displayed by the adpasswd program when users cannot change their password because their account is locked. This group policy modifies the adpasswd.account.disabled.mesg setting in the agent configuration file.

Set adclient Inaccessible Message

Customize the message displayed during password change, for a local Linux, UNIX, or Mac OS X user who is mapped to an Active Directory account, when the agent (adclient) is not accessible. This group policy modifies the pam.adclient.down.mesg setting in the agent configuration file.

Set Password Change Disallowed Message for adpasswd

Customize the text displayed by the adpasswd program when users are not allowed to change their password because password change for these users has been disabled in Active Directory. This group policy modifies the adpasswd.password.change.disabled.mesg setting in the agent configuration file.

Set Invalid User or Password Message for adpasswd

Customize the text displayed by the adpasswd program when a user enters an account name that is not recognized or an invalid password. This group policy modifies the adpasswd.account.invalid.mesg setting in the agent configuration file.

Set Permission Denied Message for adpasswd

Customize the text displayed by the adpasswd program when a user cannot change another user’s password because of insufficient permissions. This group policy modifies the adpasswd.password.change.perm.mesg setting in the agent configuration file.

Set Lockout Error Message

Customize the text displayed when a user account is locked out. This group policy modifies the pam.account.locked.mesg setting in the agent configuration file.

Set Error Message for Empty Password Entered

Customize the text displayed when a user enters an empty password. Empty passwords are not allowed. This group policy modifies the pam.password.empty.mesg setting in the agent configuration file.

Set New Password’s Mismatch Error Message for Password Change

Customize the text displayed during password change when the new passwords entered do not match. This group policy modifies the pam.password.new.mismatch.mesg setting in the agent configuration file.

Set Notification Text for Password Change

Customize the text displayed when Active Directory users attempt to change their password. This group policy modifies the pam.password.change.mesg setting in the agent configuration file.

Set Old Password Incorrect Error Message for Password Change

Customize the text displayed during password change when the old password entered is incorrect. This group policy modifies the pam.auth.failure.mesg setting in the agent configuration file.

Set Violation Error Message for Password Change

Customize the text displayed during password change if the operation fails because of a domain password policy violation. For example, if the user attempts to enter a password that doesn’t contain the minimum number of characters or doesn’t meet complexity requirements, this message is displayed. This group policy modifies the pam.policy.violation.mesg setting in the agent configuration file.

Set Password Prompt for Confirming New Password Change

Customize the text displayed when Active Directory users are prompted to confirm their new password. This group policy modifies the pam.password.confirm.mesg setting in the agent configuration file.

Set Password Prompt for New Password Change

Customize the text displayed when Active Directory users are prompted to provide their new password. This group policy modifies the pam.password.new.mesg setting in the agent configuration file.

Set Password Prompt for Old Password Change

Customize the text displayed when Active Directory users are prompted to provide their old password. This group policy modifies the pam.password.old.mesg setting in the agent configuration file.

Set Message Text for Password Change

Customize the text displayed when Active Directory users enter the correct password but must change the password immediately. This group policy modifies the pam.password.change.required.mesg setting in the agent configuration file.

Set Login Password Prompt

Customize the text displayed when Active Directory users attempts to log in. This group policy modifies the pam.password.enter.mesg setting in the agent configuration file.

Set Password Expiry Approaching Text

Customize the text displayed when the account password is approaching the expiration date. The message is displayed when the expiration date is within the limit defined by the pam.password.expiry.warn parameter. In the message, use the %d token for the number of days until expiration.

This group policy modifies the pam.password.expiry.warn.mesg setting in the agent configuration file.

Set Workstation Denied Error Message

Customize the text displayed during login if a user is denied access because of a workstation restriction. This group policy modifies the pam.workstation.denied.mesg setting in the agent configuration file.