Merge pull request #201 from isaiahng/patch-3

Update password-management-for-surface-hub-device-accounts.md
This commit is contained in:
Trudy Hakala
2016-09-20 15:44:50 -07:00
committed by GitHub

View File

@ -14,61 +14,22 @@ localizationpriority: medium
# Password management (Surface Hub) # Password management (Surface Hub)
Every Microsoft Surface Hub device account requires a password to authenticate and enable features on the device. For security reasons, you may want to change ( or "rotate") this password. However, if the device accounts password changes, the device account on the Surface Hub will be expired, and all features that depend on the device account will be disabled. You can update the device accounts password on the Surface Hub from the Settings app to re-enable these features. Every Microsoft Surface Hub device account requires a password to authenticate and enable features on the device. For security reasons, you may want to change (or "rotate") this password regularly. However, if the device accounts password changes, the password that was previously stored on the Surface Hub will be invalid, and all features that depend on the device account will be disabled. You will need to update the device accounts password on the Surface Hub from the Settings app to re-enable these features.
To prevent the device account from expiring, there are two options: To simplify password management for your Surface Hub device accounts, there are two options:
1. Turn off password expiration for the device account. 1. Turn off password expiration for the device account.
2. Allow the Surface Hub to automatically rotate the device accounts password. 2. Allow the Surface Hub to automatically rotate the device accounts password.
## Setting the password so it doesn't expire ## Turn off password rotation for the device account
Set the device accounts **PasswordNeverExpires** property to True. You should verify whether this meets your organizations security requirements. Set the device accounts **PasswordNeverExpires** property to True. You should verify whether this meets your organizations security requirements.
## Allow the Surface Hub to manage the password ## Allow the Surface Hub to automatically rotate the device accounts password
The Surface Hub can manage a device accounts password by changing it frequently without requiring you to manually update the device accounts information from the Surface Hub. You can enable this feature in **Settings**. Once enabled, the device account's password will change daily at 12 AM.
Note that when the device accounts password is changed, you will not be shown the new password. If you need to sign in to the account, or to provide the password again (for example, if you want to change the device account settings on the Surface Hub), then you'll need use Active Directory, or Office 365 Admin portal to reset the password.
For your device account to use password rotation, you must meet enter the device accounts information when you set up your Surface Hub. For more information, see [first run info for setting up the device account](https://technet.microsoft.com/itpro/surface-hub/first-run-program-surface-hub#device-account).
<table>
<colgroup>
<col width="50%" />
<col width="50%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">Environment</th>
<th align="left">Required format for device account</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>Device account is hosted only online</p></td>
<td align="left"><p>username@contoso.com</p></td>
</tr>
<tr class="even">
<td align="left"><p>Device account is hosted only on-prem</p></td>
<td align="left"><p>DOMAIN\username</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Device account is hosted online and on-prem (hybrid)</p></td>
<td align="left"><p>DOMAIN\username</p></td>
</tr>
</tbody>
</table>
 
 
 
The Surface Hub can manage a device accounts password by changing it frequently without requiring you to manually update the device accounts information. You can enable this feature in **Settings**. Once enabled, the device account's password will change daily at 12 AM.
Note that when the device accounts password is changed, you will not be shown the new password. If you need to sign in to the account, or to provide the password again (for example, if you want to change the device account settings on the Surface Hub), then you'll need use Active Directory or the Office 365 admin portal to reset the password.