Vanguard
Sun Mar 20 11:24:01 CST 2005
"Paul" <Paul@discussions.microsoft.com> wrote in message
news:85FDD6A3-BE67-4AF1-8376-F447472E5FF5@microsoft.com...
>I am part of a smaller network (25 or so). It is my understanding that
>i am
> not supposed to give out my log-on password to anyone. This keeps my
> PC
> secure. This is why the password tab on the server for me comes up
> with
> astricks. If they want into my PC they (the administrator of the
> network)
> should have the local password for my PC. Is this right or should I
> give up
> my password?
The admin won't know your password. It is ENCRYPTED! Your password is
hidden to everyone; otherwise, there would be no security. If you don't
want to divulge your password because you want to continue using it,
tell the admin to *reset* your password that whatever they like while
they need to access your account. They need to tell you what they reset
it to. Then you reset that temp password they used to whatever you used
before. However, some policies may be defined that block reusing the
same password for awhile, like recording a history of, say, 10
previously used passwords and not allowing you to reuse your old
password until you have defined 10 others in the meantime. You might
think that you could simply reset your password 10 times to push out
your old one from the history list but policies might also be in place
as to how often you can change your password, like 14 days which would
mean it would be 140 days before you could go back to your old password.
It all depends on how strong are the password policies on your host. If
you can't use your old password, you could simply create a new (and
strong) password after the admin was done, but you need admin rights to
change your password.
As soon as they are done, change your password. Remember that you were
talking over the telephone with them and anyone listening (around you,
on an extension, or a wire tap) will know it. Once you divulge it, the
admin SHOULD immediately use it to then change your password so anyone
listening can't get in outside that small window of opportunity. Once
they are done, they should tell you what password they used so you can
IMMEDIATELY change it again.
--
____________________________________________________________
Post your replies to the newsgroup. Share with others.
E-mail reply: Remove "NIXTHIS" and add "#VS811" to Subject.
____________________________________________________________