08:08:11 Information Technology Password Reset

Purpose

To define the methods of resetting account passwords while protecting confidential user information. This policy defines restrictions to prevent unauthorized password changes for all user accounts.

Policy

Definitions: For the purposes of this policy all definitions are defined in the Information Technology Definitions Policy.

Before changing an account owner’s password, IET must verify the account owner’s identity. Only the account owner may request a password change.

IET staff are to direct users to the self-help password reset page where the information entered by staff, faculty and students remains secure and confidential. If this process fails, it is necessary for a Helpdesk representative to manually reset the user’s account password.

Users must provide the last four digits of their social security number, birthdate, and full name as defined in the ERP system to correctly identify themselves as the account owner. Additional information cannot substitute for the required information. Account information will not be shared and passwords will not be reset for anyone who is not the account owner. 11/15; 05/16; 09/17