• all users will be required to have a password.

• each password must contain at least 8 characters (up to 200) and include at least 1 uppercase, 1 lowercase, 1 special character, and 1 number.

• passwords must be changed every 90 days; a prompt will be given beginning on the 85th day, and on the 90th day users will not be able to access Denali until they change their password (the SUP user can reset all passwords).

• users cannot use the same password more than once.

• if users enter an incorrect password 3 times, their account will be locked for 30 minutes. An administrator can unlock the account by resetting the password or unchecking the Locked check box on the user record in the CMS Add/Change Users window.