Authentication Policy

Use this dialog box to configure standard user authentication.

General

Use this tab to specify the password to be used to gain access to the device, and a password policy.

Password


Password	Enter the authentication password to be used by the user to gain access to the device.

Policy


Allow users to change their account passwords	Select this option to enable users to enter their own password.
Allow users to reset forgotten passwords using questions	Select this option to enable users who want to reset their password to be prompted with security questions.
User passwords must meet the following complexity requirements	Select this option to require user passwords to meet the complexity requirements specified in the Complexity Requirements section.

Complexity Requirements


Minimum Password/PIN Length	The minimum number of characters or numbers password or PIN must have.
Must contain at least one digit	The password must contain at least one digit.
Must contain at least one upper case letter	The password must contain at least one uppercase letter.
Must contain at least one lower case letter	The password must contain at least one lowercase letter.
Must contain at least one punctuation symbol	The password must contain at least one punctuation symbol.

Use this tab to configure automatic device-side actions based on defined authentication events.


Add	Opens the Event Configuration dialog box in which you can select an authentication event and specify the action you want to execute when the event occurs.
Edit	Opens the Event Configuration dialog box in which you can edit the select authentication event and its associated action.
Delete	Deletes the selected action.

Use this tab to replace the default banners that appear on the device with custom images.

Note: The default dimensions are 214 × 36 pixels, and the image file must be in BMP format.


Login Screen	This is the image that appears on the device login screen. Select an image file from the list or click Browse to select an image on your file system.
Device Lock Screen	This is the image that appears on the device lock screen. Select an image file from the list or click Browse to select an image on your file system.

Use this tab to select operating system integration options.

Note: These options are applicable only to Windows Mobile 5 and later devices.


Display notification screen when device is locked	Configures the device to present a clear indication of the device's locked status to users.
Integrate with Windows Mobile device authentication subsystem	When this option is selected, the agent is registered with the operating system authentication subsystem and replaces the standard password prompt with its custom password prompt. This provides maximum security for the device because the password prompt engages immediately on device startup, ensuring the device cannot be accessed without the user first providing the user or administrator password. With this option, the password prompt is automatically re-engaged when the operating system determines that the idle timeout has expired. Note: This option is applicable only when both an administrator password and a user password have been configured and the device is running the Windows Mobile 5 or later operating system. For devices running other operating systems, the password prompt is handled at the application layer and is not driven directly by the operating system. In some cases you may wish to disable this option to avoid the authentication plug-in from conflicting with other third-party security solutions that may be running on the device.