policies and tools for identifying dormant accounts and maintaining unique passwords