Carnegie Mellon University

Privileged Accounts & Passwords

Privileged Accounts are available to administrators, and include both Active Directory accounts and Kerberos accounts. 

Password Requirements: 

  • Last five passwords cannot be used.
  • Must include a combination of: lowercase, uppercase, numbers and symbols.
  • Must be at least 15-characters.
Intended for: Active Directory (AD) or Windows System Administrators with a -admin, -cadmin, -pciadmin, or -vrtadmin instance.

  1. Log in to CMU’s Password (Credential) Management tool. 
  2. Click Set Password for a Privileged Account.
  3. Log in using DUO (if required).
  4. Select the AD account for the password that you want to change. 
  5. Follow the onscreen instructions to change your AD password, following the Privileged Account Password requirements.
  6. Click Change Password. 
Note: AD accounts have a 90-day password reset policy.
Intended for: Kerberos System Administrators with a /root, /admin, or /ldap instance.

  1. Log in to CMU’s Password (Credential) Management tool. 
  2. Click Set Password for a Privileged Account.
  3. Log in using DUO (if required).
  4. Select the Kerberos account for the password that you want to change. 
  5. Follow the onscreen instructions to change your Kerberos password, following the Privileged Account Password requirements.
  6. Click Change Password. 

IMPORTANT!

Kerberos Administrators with a /root, /admin, or /ldap instance must change your password in order to retain access to your account.

Resources