Password Hygiene Filter for Active Directory
MyPass Password Hygiene Filter is a value-add to MyPass Cloud customers that allows for quick and easy alignment of multi-vendor password policies via a simple agent deployment to Microsoft Active Directory Domain Controllers. The Password Filter can be installed as a stand-alone product or in conjunction with other MyPass tools.
The Password Filter can:
- Be installed in under 15 minutes as an Active Directory add-on.
- Supplements Active Directory Group Policies without overruling existing policies.
- Can be installed in Normal or Silent Mode for large deployments.
- Should be installed on all domain controllers to be effective.
- Works for Password Reset and Password Change
- Logs to Windows Server Event Log.
- Is configurable via a simple XML file for custom rules such as dictionaries and regex definitions.
The Password Filter is distributed in a single MSI-file installer package for all supported platforms. It can then be installed silently by specifying options on the command line or in a configuration file.
The MyPass Password Filter supports the following Windows Operating Systems.
| OPERATING SYSTEMS | LIMITATIONS |
|---|---|
|
Windows Server 2008 32-Bit / 64-Bit
|
None
|
|
Windows Server 2008 R2 32-Bit / 64-Bit
|
None
|
|
Windows Server 2012 64-Bit
|
None
|
|
Windows Server 2012 R2 64-Bit
|
None
|
|
Windows Server 2016 (version 1607)
|
None
|
|
Windows Server 2019 (version 1809)
|
None
|
|
Windows Server 2022
|
None
|
|
Windows Server 2025
|
None
|
The Password Filter can be installed in GUI mode, which is described and illustrated in the following installation steps.
- To start the installation, you must be logged on as a user with administrative privileges. Then start the installer or open a command prompt as Administrator, FastPass-PasswordFilter.msi. This will pop up the InstallShield Wizard program.
- After a few moments, the program will automatically proceed to the following screen.
- Click the “Next” button to continue, and for the “End User License Agreement” screen to be displayed.
- Click the “Next” button to proceed. This will take you to the “Installation Confirmation” screen.
- Click the “Install” button to proceed. This will initiate the installation process and pop up the “Installation Progress” screen. If the installation was successful, the wizard will automatically shift to the “Rule File Path” screen.
- To close the InstallShield Wizard, click the “Finish” button.
The Password Filter can be installed in silent mode. Please note that the Visual C component will NOT automatically install in GUI mode. Please make sure that the Microsoft Visual C++ 2010 Redistributable Package (x86) is installed (which can be found here http://www.microsoft.com/en-us/download/details.aspx?id=5555) on the system prior to installing the package in silent mode.
The following installation parameters are available:
- /s – Indicates that the installer will run in silent mode.
- /v”/qn” – This argument is used to specify the values of public properties for the silent installation.
- /v”/qn INSTALLDIR=C:\Program files (x86)\PasswordFilter” – Passes the installation directory value to the installer while running silently.
// If you want to install the password filter using the default installation directory %ProgramFiles%\FastPassCorp\PasswordFilter, then execute the following command:
FastPass-PasswordFilter.msi/s /v”/qn”
// Or if you want to specify the installation directory, execute the following command:
FastPass-PasswordFilter.msi/s /v”/qn INSTALLDIR=C:\PasswordFilter”
The Password Filter can be uninstalled from the Control Panel (similar to other Windows-based software). Since it is required to activate the filter in the Windows LSA service, a reboot of the serveris required.