User Control - Password Maintenance (GGPPS.INI)

📖 Overview

The GGPPS.INI file stores password authentication parameters for GGP, allowing configuration to meet your organisation’s data security policies.
It is stored in:

\Licences\Lock\

---

🧭 Navigation

1. Open User Control from the Applications Launcher.

2. Go to the User menu.

3. Select Edit Password Settings.

   • This opens GGPPS.INI in your text editor for editing.

---

⚙️ Password Authentication Features (GGP 2009 onwards)

1. Non-reversible password storage

   • Controlled by DefaultExpirationMode setting.

2. Minimum / maximum password length

   • MinimumLength and MaximumLength variables.

3. Configurable character set requirements

   • Uppercase, lowercase, numbers, symbols. (CharactersSet variable)

4. Account lockout after failed attempts

   • MaxRetries variable.

5. Password expiration period

   • ExpiresInXDays variable.

6. Prevention of password reuse

   • LastPasswordsToSave variable.

---

📝 Example Configuration

[Password Settings]
MaxRetries=5
;max 7
LastPasswordsToSave=5
MinimumLength=5
MaximumLength=12
ExpiresInXDays=75
; MustChange, CannotChange, NeverExpires
DefaultExpirationMode=MustChange,NeverExpires
; Upper,Lower,Number,Symbol
CharactersSet=Upper,Lower,Number,Symbol

See Add/Edit User for per-user password setting details.

---

🔍 Parameter Details

Parameter	Description
MaxRetries	Number of failed login attempts allowed before account lockout.
LastPasswordsToSave	Number of previous passwords remembered to prevent reuse.
MinimumLength	Minimum number of characters required. Set to 0 for no requirement.
MaximumLength	Maximum allowed length (passwords are trimmed if longer).
ExpiresInXDays	Number of days before a password expires.
DefaultExpirationMode	One of: MustChange, CannotChange, NeverExpires (mutually exclusive).
CharactersSet	Required character types: Upper, Lower, Number, Symbol.

---

💡 Implementation Notes

MinimumLength

• MinimumLength=0 → allows blank passwords.

• If site policy requires passwords, set to a value > 0.

• A non-zero value forces the Change Password dialog on login if blank.

MaximumLength

• Example: MaximumLength=10 → passwords longer than 10 are trimmed.

ExpiresInXDays

• Sets the lifetime of the password. Example: ExpiresInXDays=90 → 90 days until expiry.

DefaultExpirationMode

• MustChange → User must change password at next login.

• CannotChange → User cannot change password.

• NeverExpires → Password never expires.

LastPasswordsToSave

• Prevents re-use of the last n passwords.

CharactersSet

• Defines password complexity rules.

• Valid values: Upper, Lower, Number, Symbol (any combination).

• At least one character from each specified type is required.

• Symbol characters allowed:

  [ ] { } ! £ $ % ^ & * ( ) _ + - = ; : @ # ~ ? > < |
  

• Least complex → No CharactersSet and no MinimumLength.

• Most complex → MinimumLength=8 and CharactersSet=Upper,Lower,Number,Symbol.

---

📌 Summary

The GGPPS.INI file gives administrators fine-grained control over password policy in GGP, including strength, expiry, and lockout rules. Adjust these settings to align with organisational security requirements.