Dynamics 365 F&O/AX Dynamics 365 CE / CRM Dynamics GP Business Central / NAV UG Dynamics SL Power Platform Fabric UG MS Copilot UG

[Peter Adams]

I am currently on GP 2013, will be upgrading this year. We just implemented FastPath single sigon so users could use their windows password to log into GP

The issue we run into now is if a users password is more than 15 characters, it errors out because GP has a max password character limit of 15

I have attempted to find an AD tool that sets the maximum password limit, but there isn’t any

Does anyone know of a way or software that will allow me to change the max character limit for GP or if this might be updated in a newer GP build?

——————————
Peter Adams

——————————

[Rob Klaproth]

Hi Peter,

It seems like Fast Path should have this sorted out.  Have you contacted support to see if they have any solution for this?  Now days it’s very common in todays high security world for users to have passwords longer then 15.

——Original Message——

I am currently on GP 2013, will be upgrading this year. We just implemented FastPath single sigon so users could use their windows password to log into GP

The issue we run into now is if a users password is more than 15 characters, it errors out because GP has a max password character limit of 15

I have attempted to find an AD tool that sets the maximum password limit, but there isn’t any

Does anyone know of a way or software that will allow me to change the max character limit for GP or if this might be updated in a newer GP build?

——————————
Peter Adams

——————————

[Peter Adams]

Yes, unfortunately this is something they (fastpath support) cannot fix as their SSO program is restricted to what the password field in GP is set to

You would have figured this would have been something they would have addressed during the initial scope before we dropped the investement 😉

——————————
Peter Adams
Systems Analyst
Broadwind Energy
abilene TX
——————————
——————————————-

[Tim Williams]

We just came across this situation this week when setting up a service account where we require a 16 character password by policy. 

We we got past that hurdle with a different approach to what we were trying to do, ours was not a login task. What We learned is 15 is the limit with GP (we are on 2015) and that won’t change anytime soon if ever. The way the software runs is dependent on the SQL table fields being the expected length, you just can’t change the length of a defined field, it would fail the program logic.  MSFT would have to come with the solution, maybe they will someday. 

Point is, from what we learned, easiest thing by far would be to document a network policy with IT to cap Finance user passwords at 15. Worse case is they change their password and they can’t login and they change it to something shorter.

I’ve used Fastpath SSO prior, in hindsight we never had a user with a longer password than 15. I don’t see Fastpath going down a translation table road but who knows. 

Good luck on this 

Tim

——————————
Tim Williams
Manager of Finance & Business Systems
Natera, Inc
San Carlos CA
——————————
——————————————-

[Beat Bucher]

Agree with Tim,
The way to handle this for now is to cap the max password lenght by using a domain Group Policy settings.. It could be restriced to some type or class of users only..

——————————
Beat Bucher
Business Analyst, Dynamics GP MVP
Ultra-Electronics Forensic Technology Inc.
Montreal QC/Canada
+1-514-489-4267
@GP_Beat http://dyngpbeat.wordpress.com/
Montreal QC GPUG Chapter Leader
GP2013R2 / MR2012 CU14
——————————
——————————————-

[Paul Richard]

We ran into this problem again today and I had no choice but to ask the user to decrease the length of her Windows password. We too thought to set this as a policy at the domain level.

@Beat: Your statement seems to suggest that using a password policy is currently possible. Though we see a “minimum password length”, we’ve found no “maximum password length” option. How did you accomplish this?

——————————
Paul Richard
Ville de Dieppe
——————————
——————————————-

[Beat Bucher]

Hi Paul,
you’re right.. I thought that GPO would allow for settings Min & Max pwd length, but it turns out not to be the case.. See this related blog posts:
http://www.thewindowsclub.com/maximum-length-of-password-windows-10
http://www.thewindowsclub.com/customizing-the-password-policy-in-windows-7

It seems that if your Windows 10 is linked to an Azure or Office365 user account, then some sort of pwd max length could be set.. but I couldn’t find any references regarding this.. only that the max length is 16, when syncronizing a local AD with Azure..

Microsoft has a program library code called ‘Password Filter’, which is a DLL that can be used in support of your own application pwd management, but even in there I couldn’t find any evidence about setting a max length..

It really looks like MIcrosoft never put any thought about managing that kind of limitation, especially when your read in some Technet blogs & Forums that the ‘real’ max length of a windows password could be 256 characters, but that the login screen only allows for 127, and then AD only stores 16… which clearly shows that everybody has been workign in his own corner..

——————————
Beat Bucher
Business Analyst, Dynamics GP MVP
Ultra-Electronics Forensic Technology Inc.
Montreal QC/Canada
+1-514-489-4267
@GP_Beat http://dyngpbeat.wordpress.com/
Montreal QC GPUG Chapter Leader
GP2013R2 / MR2012 CU14
——————————
——————————————-

[Paul Richard]

Thanks for the follow up Beat!

——————————
Paul Richard
Ville de Dieppe
NB
——————————
——————————————-

[Charles Ray]

This is something I wish Microsoft would fix.  With the current state of network and internet security, service account passwords are usually long and complex due to the frequent need to have the password set as non-expiring, however 15 characters should be sufficient.  The rude surprise comes, however, when an ‘sa’ account having a password greater than 15 characters is able to open Dynamics Utilities to set up the product and create databases, but then is unable to log in to GP with that same password.

——————————
Charles Ray
Senior Systems Specialist
CAL Business Solutions, Inc.
Harwinton CT
——————————
——————————————-

[Ian Grieve]

Could I suggest logging the request with Microsoft via Microsoft Connect for inclusion in the next version?

——————————
Ian Grieve
ERP Practice Manager, MVP
Perfect Image Ltd
North Tyneside
——————————
——————————————-

[Beau Mundt]

There is a program called NervePoint Access Manager that allows for setting a maximum password length.  No clue if it works, but just wanted to pass it along that it may be worth looking into.

Overriding Active Directory’s Password Policies

Tutorial: Overriding AD Password Policy Rules

——————————
Beau Mundt
Sr. Consultant
Implementation Specialists (IS)
Hawley MN
——————————
——————————————-

[Paul Richard]

I ran into this again this morning with a user having used a long Windows password. After we sorted it out, I went looking to up-vote the issue on Microsoft Connect and found that it has been closed. The Product Version in the ticket is 2016 R2, but that was probably the version the reporter was using when s/he opened it. Does anyone have any news on this? Is it resolved yet?

——————————
Paul Richard
Ville de Dieppe
NB
——————————
——————————————-

[Beat Bucher]

Hi Paul,
Are you refering to this case # 313531 ?
Resolved or Closed doesn’t mean that it has been fixed in the product.. it only means that Microsoft has taken note of it for a future update/release of the product.
It is marked as ‘Tracking’, which means the MS team assigned to this case keeps an eye on it and you can still vote.. the more votes a case gets, the more likely it’s going to be pushed up the ladder to the managing dev team.
You’ll really have to look at the fix-list or What’s New doc at the next coming GP releases, to figure out if the issue was resolved.
Keep voting for it 🙂

——————————
Beat Bucher
Business Analyst, Dynamics GP MVP
Ultra-Electronics Forensic Technology Inc.
Montreal QC/Canada
@GP_Beat http://dyngpbeat.wordpress.com/
Montreal QC GPUG Chapter Leader
GP2013R2 / MR2012 CU14
——————————
——————————————-

[Paul Richard]

Sorry for the slow response, but thanks for the clarification! Yes, that was the case I was referring to and I’ve already voted it up. It looks like it has ticked up a little more since last week. Hopefully, others on this thread can do the same and get this moved up in priority.

——————————
Paul Richard
Ville de Dieppe
NB
——————————
——————————————-

[Mark Polino]

The Microsoft team has made noises about fixing this by lengthening the PW field in GP 2019. I don’t have more info than that right now. Fastpath Config AD is constrained by GP’s 15 character maximum. 

Mark

——————————
Mark Polino
Director of Client Services
Fastpath
Altamonte Springs FL
——————————
——————————————-