Carnegie Mellon University

Active Directory Account/Password

Active Directory accounts (-admin, -cadmin and -vrtadmin) are available to administrators with a server in the Data Center. This account has a 90-day password reset policy to:

  • Protect sensitive IT services.
  • Meet ISO security guidelines.
  • Address auditor guidance.
  • Ensure that our privileged accounts are secure.

Change your AD Password

  1. Log off from any open Terminal sessions.
  2. Connect to General VPN.
  3. Go to
  4. Generate a one-time password (OTP).
  5. Log on with the OTP and your Andrew userID and password.

Password Requirements

  • Last five passwords cannot be used.
  • Must include a combination of: lowercase, uppercase, numbers and symbols.
  • Must be at least 15-characters.
  • Expires within 90 days.
  • Lock out for two hours after six failed log in attempts.