2010 Quest Software, Inc. ALL RIGHTS RESERVED. TRADEMARKS. Disclaimer

Transcription

1 4.7 User Guide

2 2010 Quest Software, Inc. ALL RIGHTS RESERVED. This guide contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser's personal use without the written permission of Quest Software, Inc. If you have any questions regarding your potential use of this material, please contact: Quest Software World Headquarters LEGAL Dept 5 Polaris Way Aliso Viejo, CA USA legal@quest.com Refer to our Web site for regional and international office information. TRADEMARKS Quest, Quest Software, the Quest Software logo, Aelita, Akonix, AppAssure, Benchmark Factory, Big Brother, ChangeAuditor, DataFactory, DeployDirector, ERDisk, Foglight, Funnel Web, GPOAdmin, I/Watch, Imceda, InLook, IntelliProfile, InTrust, Invertus, IT Dad, I/Watch, JClass, Jint, JProbe, LeccoTech, LiteSpeed, LiveReorg, MessageStats, NBSpool, NetBase, Npulse, NetPro, PassGo, PerformaSure, Quest Central, SharePlex, Sitraka, SmartAlarm, Spotlight, SQL LiteSpeed, SQL Navigator, SQL Watch, SQLab, Stat, StealthCollect, Tag and Follow, Toad, T.O.A.D., Toad World, vanalyzer, vautomator, vcontrol, vconverter, vessentials, vfoglight, vmigrator, voptimizer Pro, vpackager, vranger, vranger Pro, vreplicator, vspotlight, vtoad, Vintela, Virtual DBA, VizionCore, Vizioncore vautomation Suite, Vizioncore vessentials, Xaffire, and XRT are trademarks and registered trademarks of Quest Software, Inc in the United States of America and other countries. Other trademarks and registered trademarks used in this guide are property of their respective owners. Disclaimer The information in this document is provided in connection with Quest products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Quest products. EXCEPT AS SET FORTH IN QUEST'S TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, QUEST ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL QUEST BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF QUEST HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Quest makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. Quest does not make any commitment to update the information contained in this document. Quest Password Manager - User Guide Updated - October, Software Version - 4.7

3 CONTENTS ABOUT THIS GUIDE INTENDED AUDIENCE CONVENTIONS ABOUT QUEST SOFTWARE CONTACTING QUEST SOFTWARE CONTACTING QUEST SUPPORT CHAPTER 1 SELF-SERVICE SITE GETTING STARTED CONNECTING TO SELF-SERVICE SITE LOCATING YOUR ACCOUNT CREATING AND UPDATING YOUR QUESTIONS AND ANSWERS PROFILE RESETTING YOUR PASSWORD CHANGING YOUR PASSWORD UNLOCKING YOUR ACCOUNT CONFIGURING MY ALERTS CHANGING USER INTERFACE LANGUAGE CHAPTER 2 HELP DESK SITE CONNECTING TO HELP DESK SITE RESETTING USER PASSWORDS MANAGING USER'S QUESTIONS AND ANSWERS PROFILES ASSIGNING TEMPORARY PASSCODES VERIFYING USER IDENTITY UNLOCKING USER ACCOUNTS GLOSSARY iii

4 Quest Password Manager iv

5 About This Guide Intended Audience Conventions About Quest Software Contacting Quest Software Contacting Quest Support

6 Quest Password Manager Intended Audience This document has been prepared to assist you in becoming familiar with Quest Password Manager. User Guide contains the information required to install and use Quest Password Manager. It is intended for network administrators, consultants, analysts, and any other professionals using the product. Conventions In order to help you get the most out of this guide, we have used specific formatting conventions. These conventions apply to procedures, icons, keystrokes and cross-references. ELEMENT Select Bolded text Italic text Bold Italic text Blue text CONVENTION This word refers to actions such as choosing or highlighting various interface elements, such as files and radio buttons. Interface elements that appear in Quest Software products, such as menus and commands. Used for comments. Used for emphasis. Indicates a cross-reference. When viewed in Adobe Reader, this format can be used as a hyperlink. Used to highlight additional information pertinent to the process being described. Used to provide Best Practice information. A best practice details the recommended course of action for the best result. Used to highlight processes that should be performed with care. + A plus sign between two keystrokes means that you must press them at the same time. A pipe sign between elements means that you must select the elements in that particular sequence. 6

7 User Guide About Quest Software Quest Software simplifies and reduces the cost of managing IT for more than 100,000 customers worldwide. Our innovative solutions make solving the toughest IT management problems easier, enabling customers to save time and money across physical, virtual and cloud environments. For more information about Quest go to Contacting Quest Software Mail Web site Quest Software, Inc. World Headquarters 5 Polaris Way Aliso Viejo, CA USA Refer to our Web site for regional and international office information. Contacting Quest Support Quest Support is available to customers who have a trial version of a Quest product or who have purchased a Quest product and have a valid maintenance contract. Quest Support provides unlimited 24x7 access to SupportLink, our self-service portal. Visit SupportLink at From SupportLink, you can do the following: Retrieve thousands of solutions from our online Knowledgebase Download the latest releases and service packs "Create, update and review Support cases View the Global Support Guide for a detailed explanation of support programs, online services, contact information, and policy and procedures. The guide is available at 7

8 Quest Password Manager 8

9 1 Self-Service Site Getting Started Connecting to Self-Service Site Locating Your Account Creating and Updating Your Questions and Answers Profile Resetting Your Password Changing Your Password Unlocking Your Account Configuring My Alerts Changing User Interface Language

10 Quest Password Manager Getting Started To start using Password Manager, you must register by creating your personal Questions and Answers profile. For step-by-step procedure on how to create your private Questions and Answers (Q&A) profile, see "Creating and Updating Your Questions and Answers Profile" on page 11. The topics covered in this section will provide you the information you need to create your personal Q&A profile and perform password management tasks by using the Self-Service site of Password Manager. Connecting to Self-Service Site You can open the Self-Service site by clicking the desktop or Start menu shortcut to the site. If there are no such shortcuts on your computer, you can open the site by entering the Self-Service site URL in your Web browser. You can obtain the URL path to the Self-Service site from your system administrator. To connect to the Self-Service site using a Web browser 1. Connect to the Self-Service site by typing the Self-Service site URL in the address bar of your Web browser. By default, the URL is where <ComputerName> is the name of the computer on which Password Manager is installed. 2. On the Enter Your User Name page type in your user account name, and then click OK. If you forgot your user name, follow the steps outlined in Locating Your Account on page 11. If you have entered only part of your user name, then you will be redirected to the Locate Account page where you can select your account or search for it. When specifying your user account, you can use any of the following formats: <user_name>, <domain>\<user_name>, or <user_name>@<domain>, where <user_name> is your user name and <domain> is your domain. 3. On the Welcome page, you can perform the following tasks: TASK Register with Password Manager or update your personal Questions and Answers profile REFERENCE Creating and Updating Your Questions and Answers Profile on page 11 Reset your forgotten passwords Resetting Your Password on page 13 Change your passwords Changing Your Password on page 13 Unlock your account Unlocking Your Account on page 14 Set up notifications Configuring My Alerts on page 15 If your account is locked, and if you forgot your user name or your password, you can access the Self-Service site of Password Manager from the Windows logon screen, provided that the administrator has configured Password Manager to allow you open the Self-Service site from the Windows logon screen. To connect to the Self-Service site from the Windows logon screen If you are not logged on to the system, press Ctrl+Alt+Del and click the Forgot My Password link on the Windows logon screen.

11 User Guide 2. If you are already logged on to the system, click the Manage My Password link on the Windows logon screen on a pre-windows Vista operating system or the Forgot My Password link on a Windows Vista or Windows 7 operating system. Locating Your Account To locate your account 1. Connect to the Self-Service site by typing the Self-Service site URL in the address bar of your Web browser. By default, the URL is where <ComputerName> is the name of the computer on which Password Manager is installed. You can obtain the computer name from your system administrator. 2. On the Enter Your User Name page, click the Forgot your user name? link. 3. On the Locate Account page, do the following, and then click Search: Type in part of your first or last name, or both, or your in the Enter your name text box. Select your domain from the Domain list box, if any. If required, in the Enter the characters you see on the picture text box type in the characters on the picture. You may not observe the case of the characters since the input is case-insensitive. If you cannot distinguish the characters, click the refresh button to change the picture and again type in the characters. 4. Under Search Results, identify and click your user name. If you cannot find your account in the search results, follow the instructions on the screen. If you enter a part of your Account name, several matches may be found. In this case you will see a list of user names followed by descriptions. Select your Account name from this list. You can change UI language. for more information see Changing User Interface Language on page 17 Creating and Updating Your Questions and Answers Profile To register with password Manager, you need to create your personal Questions and Answers profile. A Questions and Answers profile (Q&A profile) is a series of security questions to which you specify your private answers. Later, you will provide your answers to the security questions when using the Self-Service site to reset you forgotten passwords or unlock your account. When you create or update your Q&A profile, ensure that nobody knows the correct answers to the Q&A profile questions but you. To create or update your personal Questions and Answers profile 1. Connect to the Self-Service site by using the procedure outlined in Connecting to Self-Service Site on page On the Welcome page, click the My Questions and Answers Profile box. 3. On the Enter Your Password page, type in your password in the Password text box, and then click Next. 4. On the Enter Defender Passcode page, type the passcode from your Defender token, and then click Next. 11

12 Quest Password Manager This step is optional and appears only if the administrator has configured Defender in your environment. 5. On the Configure Your Questions and Answers Profile page, do the following: To change language of your Q&A profile, click the Select Language link and choose your preferred language from the Select your preferred language list. To prevent anyone from seeing your answers to the questions in your private profile, select the Hide my answers for security purposes check box. Then, your answers will be displayed as a series of asterisks. This step is optional and appears only if the administrator has configured Password Manager to allow you to hide your answers. If required, select the I agree that Password Manager will store my personal information check box. For questions titled Question, specify your answer. For questions titled Select a question, choose a question from the drop down list, and then specify your answer to the selected question. For questions titled Create your own question, type in any question, and then specify your answer to this question. For questions titled Help Desk authentication question, specify your answer. Should you ever forget your password and contact Help Desk for assistance, the operator may ask you to tell the complete answers or several characters from each of your answers to questions of this type. 6. On the Select Target Systems page, select check boxes next to the systems in which you want to reset your password, and then click Next. This step is optional and appears only if the administrator has configured Password Manager to allow you to manage your passwords in different systems. 7. If prompted, on the Enter New Password page, do the following: To ensure that your new password complies with the current password policies, click the click here link to see the password policy requirements. Type your new password in the Password text box. Re-type the password in the Confirm new password text box. This step is optional and appears only if your password has expired or the administrator has configured Password Manager to require password reset at next logon. 8. When done, click Finish. If you have forgotten your password and, at the same time, are not registered with Password Manager, you must obtain a temporary passcode from the help desk before you can create your Questions and Answers profile and reset your password. To create or update your Q&A profile by using passcode 1. Connect to the Self-Service site. 2. On the Enter Your User Name page, type in your user name, and then click OK. 3. On the Welcome page, click I Have a Passcode. 4. On the Enter Passcode page, type in your temporary passcode, and then click Next. If you do not yet have a passcode, you can obtain it from the help desk. 5. Follow steps 4-5 in the procedure outlined above. The answers are not case sensitive. 12

13 User Guide Resetting Your Password You can reset your password by using the Self-Service site, provided that you have the appropriate permissions to do so. Password Manager allows you to reset your password before you log on to the network (from the Windows logon screen), and when you are already logged on to the system. To reset your password 1. Connect to the Self-Service site by using the procedures outlined in Connecting to Self-Service Site on page On the Welcome page, click the Forgot My Password box. 3. On the Answer the Questions page, type the correct answers to the displayed questions, and then click Next. On this page, you must provide the answers which you have specified in your personal Questions and Answers profile. To hide your answers, select the Hide my answers for security purposes check box. 4. On the Enter Defender Passcode page, type the passcode from your Defender token, and then click Next. This step is optional and appears only if the administrator has configured Defender in your environment. 5. On the Select Target Systems page, select check boxes next to the systems in which you want to reset your password, and then click Next. This step is optional and appears only if the administrator has configured Password Manager to allow you to manage your passwords in different systems. 6. On the Enter New Password page, do the following, and then click Finish: To ensure that your new password complies with the current password policies, click the click here link to see the password policy requirements. Type your new password in the New Password text box. Re-type the password in the Confirm new password text box. The number of attempts to provide the correct answers is defined by the current Security Policy. If you exceed the allowed number of attempts, you will see an error message describing the problem. Then, you can contact help desk support for assistance. Changing Your Password You can change your password provided that you have the appropriate permissions to do so. To change your password 1. Connect to the Self-Service site by using the procedures outlined in Connecting to Self-Service Site on page On the Welcome page, click Manage My Password. 3. On the Enter Your Password page, type your password in the Password text box, and then click Next. 4. On the Enter Defender Passcode page, type the passcode from your Defender token, and then click Next. This step is optional and appears only if the administrator has configured Defender in your environment. 13

14 Quest Password Manager 5. On the Select Target Systems page, select check boxes next to the systems in which you want to change your password, and then click Next. This step is optional and appears only if the administrator has configured Password Manager to allow you to manage your passwords in different systems. 6. On the Enter New Password page, do the following, and then click Finish: To ensure that your new password complies with the current password policies, click the click here link to see the password policy requirements. Type your new password in the Password text box. Re-type the password in the Confirm new password text box. The password you specify will be applied to all the selected systems. To specify different passwords in different systems, you need to complete steps 1-5 separately for each Target System. Unlocking Your Account You can unlock your account when it is locked, such as when you exceed the allowed number of attempts to enter the correct password. Note, that you can unlock your account only if the administrator has configured Password Manager to allow you to do it. To unlock your account 1. Depending on the operating system installed on your computer, do either of the following: On a pre-windows Vista operating system, click the Forgot My Password button on the Windows logon screen. On a Windows Vista or Windows 7 operating system, click the Forgot My Password command link on the Windows logon screen. 2. On the Enter Your User Name page, type in your user name, and then click OK. If you forgot your user name, follow the steps outlined in Locating Your Account on page 11. If you have entered only part of your user name, then you will be redirected to the Locate Account page where you can select your account or search for it. 3. On the Welcome page, click Unlock My Account. 4. On the Answer the Questions page, type the correct answers to the displayed questions. On this page, you must provide the answers which you have specified in your personal Questions and Answers profile. To hide your answers, select the Hide my answers for security purposes check box. 5. Click Finish. The number of attempts to provide the correct answers is defined by the current Security Policy. If you exceed the allowed number of attempts, you will see an error message describing the problem. Contact help desk support for assistance. 14

15 User Guide Configuring My Alerts You can configure Self-Service site to automatically send you notifications when specified events occur. Note, that you can change your alert settings only if the administrator has configured Password Manager to allow you to do it. To subscribe to event notifications 1. Open the Welcome page of the Self-Service site by using the procedure outlined in Connecting to Self-Service Site on page On the Welcome page, click My Alerts. 3. On the Enter Your Password page, type your password in the Password text box, and then click Next. 4. On the Enter Defender Passcode page, type the passcode from your Defender token, and then click Next. This step is optional and appears only if the administrator has configured Defender in your environment. 5. On the Set Up Event Notifications page, select appropriate check boxes to receive notifications about success and/or failure of the following events: My Questions and Answers profile is updated My Alert settings are updated My account is unlocked My password is reset My password is changed My Questions and Answers profile must be updated My Questions and Answers profile is locked My password expires Your list of alerts may be different since some options may be disabled by your administrator. 6. Click Finish to confirm your settings. 15

16 Quest Password Manager 16

17 User Guide Changing User Interface Language This feature is available only in multilingual versions of Password Manager. The User Interface resources of Password Manager are fully localized. You can switch to different user interface languages on the fly. To change the user interface language 1. On the navigation bar, click Change Language. 2. Select your preferred language. 3. Click Done. If you do not see the Change Language command on the navigation bar, click Back until you see a page where this command appears. 17

18 Quest Password Manager 18

19 2 Help Desk Site Connecting to Help Desk Site Resetting User Passwords Managing User's Questions and Answers Profiles Assigning Temporary Passcodes Verifying User Identity Unlocking User Accounts

20 Quest Password Manager Connecting to Help Desk Site To connect to the Help Desk site Connect to the Help Desk site by typing the Help Desk site URL in the address bar of your Web browser. By default, the URL is where <ComputerName> is the name of the computer on which Password Manager is installed. You can obtain the URL path to the Help Desk site from your system administrator. To manager a user 1. Connect to the Help Desk site by using the procedure outlined above. 2. On the Locate Account page, type either part of user's first and/or last name, or both, and then click Search. 3. Under Search Results, click the user account matching the search criteria. 4. On the Manage User page, you can perform the following tasks: TASK REFERENCE Reset the user's password Resetting User Passwords on page 20 Manage the user's Q&A profile Managing User's Questions and Answers Profiles on page 21 Assign a temporary password to the user Assigning Temporary Passcodes on page 21 Unlock the user's account Unlocking User Accounts on page 22 Verify identity of the user Verifying User Identity on page 22 You can change Quest Password Manager UI language. for more information see Changing User Interface Language on page 17. Resetting User Passwords To reset a user's password Connect to the Help Desk site by using the procedure outlined in Connecting to Help Desk Site on page On the Manage User page, click Reset Password. The Reset Password wizard starts. 3. On the Verify User Identity page of the wizard, do either of the following: Ask the user to provide the answer to a mandatory question randomly selected from those specified in user s Q&A Profile, and type the answer in the corresponding text box. Ask the user to provide the answer to the Help Desk authentication question, and type the answer in the corresponding text box. Ask the user to provide the answer to Help Desk authentication question, and ensure that this answer exactly matches the answer displayed in the corresponding text box. Ask the user to provide you the characters in the numbered positions of their answer to the Help Desk authentication question, and type in the characters under the appropriate position numbers. 4. Click Next. 5. On the Enter New Password page of the wizard, do the following: In the New password text box, type in a new password. In the Confirm new password text box, re-type the password.

21 User Guide Select the User must change password at next logon check box, if required. 6. Click Finish. Managing User's Questions and Answers Profiles To change the settings for a user's Question and Answers profile 1. Connect to the Help Desk site by using the procedure outlined in Connecting to Help Desk Site on page On the Manage User page, click Manage Q&A Profile. 3. On the Change Q&A Profile Settings page, specify one of the following options: OPTION The user must update his Q&A profile to reset password or to unlock account The user must update his Q&A profile after this period, in days DESCRIPTION Select to mark the user's Questions and Answers profile as invalid, which means that the user will not be able to reset his password and unlock his account by using the Self-Service site unless the user updates the Q&A profile in compliance with the current administrator-defined settings. Select to set the number of days after which the user's Questions and Answers profile will be automatically marked as invalid. 4. Click Finish. Assigning Temporary Passcodes If a user has forgotten the password and, at the same time, has not yet registered with Password Manager, the user cannot create a personal Q&A profile, or otherwise use Password Manager. To register with Password Manager, and access its self-service functionality, the user, then, must obtain a personal temporary passcode which must be used within the specified period to complete the registration procedure. You can assign temporary passcodes to users provided that you have the appropriate permissions. To assign a temporary passcode to a user 1. Open the Manage User page by using the procedure outlined in Connecting to Help Desk Site on page On the Manage User page, click Assign Passcode. 3. On the Assign Passcode page, read the temporary passcode to the user. Let the user know the passcode's expiration period. 4. Click Finish. Passcode expiration time is a period within which a newly generated passcode is valid. The user must update or create their Q&A profile by using this passcode within the specified period. 21

22 Quest Password Manager Verifying User Identity Before attempting any password management task, you must verify identity of the user. To verify identity of a user 1. Open the Manage User page by using the procedure outlined in Connecting to Help Desk Site on page On the Manage User page, click Verify Identity. 3. On the Verify User Identity page, do either of the following: Ask the user to provide the answers to the Help Desk authentication questions, and type the answers in the corresponding text boxes. Ask the user to provide the answers to Help Desk authentication questions, and ensure that these answers exactly match the answers displayed in the corresponding text boxes. Ask the user to provide you the characters in the numbered positions of their answers to the Help Desk authentication questions, and type in the characters under the appropriate position numbers. 4. Click Finish. Unlocking User Accounts To unlock a user account 1. Open the Manage User page by using the procedure outlined in Connecting to Help Desk Site on page On the Manage User page, click the Unlock Account box. 3. On the Verify User Identity page of the wizard, do either of the following: Ask the user to tell you their answers to the Help Desk authentication questions, and type the answers in the corresponding text boxes. Ask the user to tell you their answers to their Help Desk authentication questions, and ensure that these answers exactly match the answers displayed in the corresponding text boxes. Ask the user to tell you the characters in the numbered positions of their answers to the Help Desk authentication questions, and type in the characters under the appropriate position numbers. 4. Click Finish. 22

23 User Guide Glossary A account application log attribute A record that consists of all the information that defines a user to Microsoft Active Directory. This includes the user name and password required for the user to log on, the groups in which the user account has membership, and the rights and permissions the user has for using the computer and network and accessing their resources. The log that lists all actions performed by Quest Password Manager. A piece of data that stores information that is specific to an object. A set of attributes stores the data that defines an object. D domain A logical collection of resources that consists of computers, printers, computer accounts, user accounts, and other related objects. domain controller For a Windows Server domain, the server that authenticates domain logons and maintains the security policy and the security accounts master database for a domain. Domain controllers manage user access to a network, which includes logging on, authentication, and access to the directory and shared resources. G Group Policy L An administrator s tool for defining and controlling how programs, network resources, and the operating system operate for users and computers in an organization. locked Questions and Answers Profile A Questions and Answers Profile that temporarily cannot be used. A Questions and Answers Profile can become locked after a number of unsuccessful attempts to answer the questions. M mailbox The delivery location for all incoming mail messages addressed to a designated owner. Information in a user's mailbox is stored in the private information store on a Microsoft Exchange server computer. A mailbox can contain received messages, message attachments, folders, folder hierarchy, and more. Server applications for Microsoft Exchange server are often designed with a mailbox for communication. 23

24 Quest Password Manager mandatory question A question, the same for all users in a domain, that a person must answer in order to authenticate themselves using Quest Password Manager. managed domain A domain registered with Quest Password Manager. You can manage multiple domains by using Quest Password Manager. mixed mode N native mode O The default mode setting for domains on Windows 2000/2003/2008 domain controllers. Mixed mode allows Windows 2000/2003/2008 domain controllers and Windows NT backup domain controllers to co-exist in a domain. Mixed mode does not support the universal and nested group enhancements of Windows 2000/2003/2008. A Windows 2000/2003/2008 Domain is in native mode when: All domain controllers in the domain have been upgraded to Windows 2000/2003/2008. An administrator has enabled the native mode operation using the domain property page in the Active Directory Users and Computers snap-in. optional question A question from the pre-defined list that a person must answer in order to authenticate themselves using Quest Password Manager. organizational unit An Active Directory container object used within domains. An organizational unit is a logical container into which users, groups, computers, and other organizational units are placed. It can contain objects only from its parent domain. P Password Manager Service Realm A set of Password Manager instances sharing common configuration to ensure enhanced availability and load balancing. A single domain may be managed by several different Password Manager realms. Password Manager Realm Affinity An association between Secure Password Extension and a Password Manager Service. If you enforce an affinity to specific Password Manager realm using Group Policy, all the clients running Secure Password Extension and affected by this policy will use only the Password Manager Service instances that belong to the specified realm. Q Questions and Answers Profile (Q&A Profile) A set of questions selected by a user from the Question list and user's answers to them. A Questions and Answers Profile is used to authenticate a person using Quest Password Manager. 24

25 User Guide Question list S A set of questions used in creating users' Questions and Answers profiles. The list is defined by the administrator and contains a series of questions in a certain language that users from a specific domain must answer in order to create or update their personal Questions and Answers profiles. A question list defines the number of questions of each type and the wording of mandatory and optional questions. Secure Password Extension A component of Password Manager that facilitates access to the Self-Service site from the Windows logon screen. This component is installed on end-user computers. site One or more Microsoft Exchange servers that provide services to a set of users. Sites can be centrally managed and can span physical locations. special character A character that is neither alphabetic nor numeric. U user-defined question A question that a person must provide along with the answer in order to authenticate themselves using Quest Password Manager. 25