Can we change passwords without recertifying ID files?

We need to change password quality for many of our user IDs. Is there a more efficient way than recertifying their "ID files" or exporting/importing safe IDs?

We are running 6.5 on XP and utilizing the single sign-on feature. Our Active Directory policies require staff to change their passwords monthly, with certain length and data credentials. If a password change is accepted by AD and not by the Notes client, the SSO feature breaks.

Therefore, we would like to downgrade password quality on Notes IDs to match our AD policies, which will govern the user rights.

We want to do this because our company has grown from many separate companies/domains, so ID password quality varies greatly depending when the user ID was created and from which company.
There is no way to change the password quality without recertifying the ID file. Bear in mind that the rules for passwords are not the same between Notes and Active Directory, so even if someone picks a new password for AD, it may get rejected by Notes. An example of this is AD usually keeps the five most recent passwords in storage before it can be reused; Notes keeps fifty.

Do you have comments on this Ask the Expert question and response? Let us know.

This was first published in November 2004