Intended for: Users who need to change their FERMI domain (Windows login) password.
Scenario/Use Case:
This article provides instructions on how to change your FERMI domain (Windows login) password.
Instructions:
Kerberos password requirements
- Minimum of 10 characters
- Two of the four character groups must be used. These groups include:
- English uppercase characters (A through Z)
- English lowercase characters (a through z)
- Base 10 digits (0 through 9)
- Non-alphabetic characters (For example: ! @ # $ ^ & * % - . , )
- This password expires every 400 days.
- You cannot repeat your last 8 passwords.
By using the Password Manager Tool
You can change your FERMI domain (Windows login) password by using the Password Manager Tool. Instructions can be found on this page.
From a Windows computer in the Fermi domain
Press Ctrl + Alt + Delete and click "Change a password..." You must first enter your old password and then enter the new password twice.
From a Windows computer not in the Fermi domain
Your computer must have a .FNAL.GOV IP address for the following to work. You can get a .FNAL.GOV IP address via DHCP while on the Fermilab site or by establishing a VPN connection to Fermilab. VPN information can be found at KB0010655
- Press Ctrl+Alt+Del and click "Change a password..."
- Type your user name and domain in this format: username@fermi.win.fnal.gov
- The Logon box should appear dimmed.
- Type your old password.
- Type your new password.
- Re-type the new password.
- Click "OK".
Note: Per Fermi default domain policy, a user may only change their password once in a 48-hour period.
From a non-Windows machine
You can also change your Kerberos password for the Windows domain from a Linux, Mac or Unix computer by opening a terminal window and running the following command at the command prompt:
% kpasswd username@FERMI.WIN.FNAL.GOV