Using profiles for password management is an effective way to restrict unsolicited database usage. Every DBA should verify the password restrictions and setup an appropriate number of profiles for the groups or types of users within the database.

This story continues at
http://www.dbasupport.com/oracle/ora...yGuide04.shtml