Reference - Managing Password Security with GGPPS.INI – GGP Systems Help Center

Overview

The GGPPS.INI file is a configuration file that allows administrators to define and enforce password security policies within GGP. It supports settings such as password complexity, expiration, retry limits, and history to help ensure robust access control.

This file is stored in:
<GGP Installation Root>\Licences\Lock\GGPPS.INI

Accessing the File

To edit password policy settings:

Launch the GGP Applications Launcher.
Click the Users icon.
From the User menu, select Edit Password Settings.

This opens the GGPPS.INI file in a text editor where changes can be made manually.

Available Settings

Below is an example configuration, followed by descriptions of each parameter:

[Password Settings]
MaxRetries=5
LastPasswordsToSave=5
MinimumLength=5
MaximumLength=12
ExpiresInXDays=75
DefaultExpirationMode=MustChange,NeverExpires
CharactersSet=Upper,Lower,Number,Symbol

Key	Description
`MaxRetries`	Max login attempts before user account is locked. (Recommended: 3–7)
`LastPasswordsToSave`	Number of previously used passwords stored to prevent reuse.
`MinimumLength`	Minimum number of characters a password must contain.
`MaximumLength`	Maximum number of characters allowed in a password.
`ExpiresInXDays`	Number of days before a password expires and must be changed.
`DefaultExpirationMode`	Can be one or more of: `MustChange`, `CannotChange`, `NeverExpires`. (Mutually exclusive values)
`CharactersSet`	Defines required character types. Accepted values: `Upper`, `Lower`, `Number`, `Symbol`.

Password Complexity

If CharactersSet is defined, passwords must include at least one character from each specified category:

Upper: A–Z
Lower: a–z
Number: 0–9
Symbol: One or more of the following:
[ ] { } ! £ $ % ^ & * ( ) _ + - = ; : @ # ~ ? > < |

If CharactersSet is not defined, any characters may be used.

Password Expiration Modes

Mode	Description
`MustChange`	Forces users to change their password at first login.
`CannotChange`	Prevents users from changing their password.
`NeverExpires`	Password does not expire.

⚠️ Only one of the above values should be active at a time.

Best Practices

✅ Use MinimumLength=8 and include all character types for strong password enforcement.
✅ Set MaxRetries to 3–5 to prevent brute-force attacks.
✅ Use LastPasswordsToSave to prevent recent password reuse (recommend 5+).
✅ Periodically review and update password policies in line with security best practices.

Additional Notes

To enforce password entry for all users, ensure MinimumLength is greater than 0.
If a user logs in with a blank password and MinimumLength > 0, the system will prompt a password change dialog labeled "Password Maintenance" with the message: "Password has expired."