Jon - what software repository are you using? On Wed, Oct 26, 2011 at 7:13 PM, Jon Harris <[email protected]> wrote:
> I would say it would depend. Previous $dayjob$ each Admin (DA or > local) had their own password and only shared access to the Enterprise > password that was kept sealed and changed after each use. Any DA could > change any other password and get access but doing so would leave an audit > trail. Current $dayjob$ has things a lot different DA and Enterprise Admin > passwords are kept in a software repository kept on site with any admin > being able to get into the password safe but doing so will send out alerts > to the Security staff and IT administration staff. If they see you just > looking around you get called in and questioned about your access. If you > go in get a specific password and get out they don't question it nearly as > much if you notify one of the administrator's afterwards of the reason you > went into the safe they don't question it at all. > > Jon > > On Wed, Oct 26, 2011 at 3:38 PM, Roberto Grippi > <[email protected]>wrote: > >> Under Italian law any company *must* record in sealed envelopes ALL >> passwords, be it users or administrators, without any regards whether they >> are internal or external. >> >> This obligation is intended to document the entire company network, and >> allow GdF (the local IRS) to avoid answers that amount to denial of access >> like "sorry, cannot remember my password ...", and finally avoid the need of >> a complete seizure of company computers for the sake of fiscal investigation >> *in lieu *of access by properly instructed law enforcer to force access >> to the company network. >> >> HTH >> >> Best, >> Roberto Grippi >> >> >> >> 2011/10/26 HELP_PC <[email protected]> >> >>> Should an external network admin release to the boss the password ? >>> >>> Should he get a warranty that no other access the network as admin if he >>> didn't leave the job with the company ? >>> >>> - >>> >> >> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >> >> --- >> To manage subscriptions click here: >> http://lyris.sunbelt-software.com/read/my_forums/ >> or send an email to [email protected] >> with the body: unsubscribe ntsysadmin >> > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
