# Set your domain policies

To change your domain's policies, open the admin console, go to Manage Domain(s), expand your domain and click Policy. The page has one box for each policy area, namely limits, unknown users, migration, password, third party authentication and service expiry. Change what you need and click Save once at the bottom.

## How to set your domain policies

1. Open **Manage Domain(s)** in the sidebar and expand your domain.
2. Click **Policy**.
3. Open or minimise each box with the small arrow in its title bar, and change the settings you need.
4. Click **Save** at the bottom of the page.

## What is on the page

The **Policy** page is a single form. Each box has its own help page.

| Box | What it controls | Help page |
|---|---|---|
| **LIMITS FOR** your domain | Blocking users after failed logins, blocking logins for a set time, and blocking senders who send too much spam. | Block repeated failed logins |
| **USER DOES NOT EXIST** | What happens to mail sent to an address that has no mailbox in your domain. | Handle mail for unknown users |
| **Migration** | The old mail server details and auto-migrate switch used with the automatic add-user option. | Handle mail for unknown users |
| **PASSWORD POLICY** | Required character types, minimum length and forced password changes. | Set the password policy |
| **Third Party Authentication** | Checking passwords against AD, LDAP or an HTTP API. | Sign users in with AD, LDAP or an HTTP API |
| **Service(s) Expiration / Deactivation Policy** | Alert and reminder mails before a service expires, and blocking after expiry. | Warn users before a service expires |
| **Retention Policy** | Shows how long domain, user and mail data is kept (**Retain For**, in days, months or years). The **Mail** value is how long deleted mail stays recoverable by users, 7 days by default. Read-only for domain administrators. | None |

## Example

> Rohit looks after `acme.in`. In one visit to **Policy** he turns on a password rule that needs a capital letter and a number, blocks a user after five failed logins for 30 minutes, and clicks **Save** once to keep both changes.

## Good to know

- The policies apply to the domain you opened, not to other domains.
- Switches show **Yes** or **No**. A number box beside a switch is only active while the switch is **Yes**.
- If a value is not valid, a message appears and nothing is saved. Fix the box it names and click **Save** again.
- A server administrator can open the same page and change the retention periods. In the **Retention Policy** box the server administrator sets **Retain For** under **Domain**, **User** and **Mail**. Setting **Mail** longer lengthens how long users can recover deleted mail.
- A longer recovery period is also available through the Mail Rescue Plus Pack.

## Common questions

**Do I have to save each box separately?**

No. All boxes are one form. **Save** at the bottom stores every box together, so scroll down and click it once after your changes.

**Why can I not change the Retention Policy box?**

The retention periods are read-only for a domain administrator. You can see the value, for example how long deleted mail stays recoverable (7 days by default), but only the server administrator can change it.


Source: https://docs.xgenplus.com/admin/domain-policy/