|
Have that problem with Deepfreeze at one of my clients.
Unfortunately it’s a necessity in their environment. Right now they just set
the PW change interval to 9999 days. The long term solution is a script which
runs during the thaw period to change the machine account password. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Clay, Justin (ITS) Everyone, Our
Public Libraries use a software package that handles their patron logins and
billing called SomeProduct. The company that makes SomeProduct includes in
their suite, a product called SomeDiskProtection. SomeDiskProtection is similar
to Windows Disk Protection, GoBack and Deep Freeze. It’s a product that upon
reboot, restores the PC to its previously saved state. The problem with this of
course is that while the PC is up and running during the day, if it changes its
machine account password, the next time the PC is rebooted, it’s back to the
old password which results in PCs that can’t log onto the domain. We’ve now
spent a week on the phone with SomeCompany and they tell us that their only
solution is to completely disable machine password changes for the PCs running
their software. I want to ask you all what you think of this solution. How much
of a security risk do you think it is? Can you think if a workaround? The
frustrating thing is that Windows Disk Protection has a way of handling this.
It disables automatic machine password changes, but every time the PC has its
saved state updated, it performs a manual password change so that at least it’s
being changed SOMETIMES. According to SomeCompany, they have absolutely no
plans or desire to update their software to support similar functionality. Thanks, Justin Clay
|
