How to change your FERMI domain (Windows login) password

Intended for:

Users who need to change their FERMI domain (Windows login) password. 

Scenario/Use Case:

This article provides instructions on how to change your FERMI domain (Windows login) password.

Instructions:

Kerberos password requirements:

• Minimum of 10 characters.
• Two of the four character groups must be used. These groups include:
  
  • English uppercase characters (A through Z).
  • English lowercase characters (a through z).
  • Base 10 digits (0 through 9).
  • Non-alphabetic characters (For example: ! @ # $ ^ & * % - . , ).
• This password expires every 400 days.
• You cannot repeat your last 8 passwords.

By using the Password Manager Tool

You can change your FERMI domain (Windows login) password by using the Password Manager Tool. Instructions can be found on this page.

NOTE: You must have a Fermilab-issued RSA token or YubiKey to use the Password Reset tool. If you do not have either of these, you must use another option.

From a Windows computer in the FERMI domain

Press Ctrl + Alt + Delete and click "Change a password..." You must first enter your old password and then enter the new password twice.  

From a Windows computer not in the FERMI domain

Your computer must have a .FNAL.GOV IP address for the following to work. You can get a .FNAL.GOV IP address via DHCP while on the Fermilab site or by establishing a VPN connection to Fermilab. VPN information can be found at KB0010655

• Press Ctrl+Alt+Del and click "Change a password..."
• Type your user name and domain in this format: username@fermi.win.fnal.gov.
• The Logon box should appear dimmed.
• Type your old password.
• Type your new password.
• Re-type the new password.
• Click OK. 

Note:  Per Fermi default domain policy, a user may only change their password once in a 48-hour period. 

From a non-Windows machine 

You can also change your Kerberos password for the Windows domain from a Linux, Mac or Unix computer by opening a terminal window and running the following command at the command prompt:

        % kpasswd username@FERMI.WIN.FNAL.GOV

See Also:

• How to Change your Kerberos Password (UNIX/Linux Domain)
• How to change or reset your Fermilab passwords