Prerequisites

• Install the Quickpass agent on the systems that have accounts you wish to rotate passwords for. https://support.getquickpass.com/hc/en-us/articles/360035206994-How-to-install-the-Server-Agent-Manual-and-Silent 

• IT Glue	Hudu
  Ensure you have followed the IT Glue Integration Setup Guide (if you use IT Glue) https://support.getquickpass.com/hc/en-us/articles/1500009501742-IT-Glue-Integration-Setup-Guide-New	Ensure you have followed the Hudu Integration Setup Guide (if you use Hudu) https://support.getquickpass.com/hc/en-us/articles/4408662234519-Hudu-Integration-Setup-Guide
  Ensure you have completed all steps to match Accounts to IT Glue https://support.getquickpass.com/hc/en-us/articles/1500012161922-IT-Glue-Matching-Administrator-Service-and-End-User-Accounts Important - IT Glue Password Vault: Passwords from IT Glue that are added to the IT Glue host proof Vault are not supported. In this case neither IT Glue or Quickpass will have the ability to read and/or update the password for any matched accounts. Important - IT Glue Password Security set to "Only Me": Passwords in IT Glue that have visibility security set to "Only Me" are not supported as this setting will move the password entry to the "Personal" password entries list.	Ensure you have completed all steps to match Accounts to Hudu https://support.getquickpass.com/hc/en-us/articles/4408663929239-Hudu-Matching-Administrator-Service-and-End-User-Accounts

Rotation Policies

The instructions below are designed for an individual Customer Rotation configuration.  Rotation Policies that allow you to define this setting globally or for groups of customers, saving you from performing this setup repeatedly, can be defined here:

https://support.getquickpass.com/hc/en-us/articles/30120366711063-How-to-setup-and-use-Password-Rotation-Policies

Configuring/Modifying a Password Rotation Schedule

1. From the Customers screen, click the name of the desired customer you wish to configure/modify a password rotation schedule for.

2. After navigating within your desired customer, click the either the Admin Rotation or Service Rotation button in the lower left hand corner.

2.  Select the customer's Time Zone, Time of Day to do the rotation, default number of Days between rotations and Password Type (random complex passwords up to 99 characters or random passphrases) for the scheduled password rotation. Then click Save.

Password Type

- Random complex password: This is the default option for password rotation and allows you to choose a password length between 8 and 99 characters. If the Active Directory password policy is greater than 8 characters then the slider/character count will start at the minimum password length and you will only be allowed to select a length as low as the password policy minimum.  Type the number of characters you want to use, or use the slider to select the Random Complex Character Password length.

- Random Passphrases: This is a more secure option which creates passwords that are roughly 30 characters in length using actual words that are easy to read and type. This option will satisfy complexity requirements from both Active Directory and Azure Active Directory / Office 365.

To Enable this option select either Four Long Words or Five Short Words from the appropriate radio button. 

Four long word passphrase example

Five short word passphrase example

Caution: Some versions of Windows Server Essentials include a built in utility to sync Active Directory passwords with Office 365 / Azure. This utility enforces a maximum password length of 16 characters and therefore passphrases will not work in these cases. Similarly, if you are using an older version of AD Connect from prior to May 2019 when they increased the password length in Azure Active Directory to 256 characters you will experience the same issue. Be sure to test that the Active Directory server supports passwords greater than 16 characters prior to enabling this option. 

Next Steps:

• Scheduled Password Rotation Retry
• How to Setup Scheduled Password Rotation of Administrator Accounts - with External Password Vault
• How to Setup Scheduled Password Rotation of Service Accounts - with External Password Vault
• How to Setup Scheduled Password Rotation of Administrator Accounts - Quickpass Tech Vault
• How to Setup Scheduled Password Rotation of Service Accounts - Quickpass Tech Vault