We have idle pwd at 10 minutes or so, 5 pwd history, complex pwd alphanum, however the user can change the timeout length at their leisure, up to 30 min, and we have allowed user to remove the "lock on holster" restriction
just my .02
-emb
__________________
My New Bumper Sticker
"My Blackberry is smarter than your Honor Student"
|