We do this what a product from Thycotic called Secret Server (http://www.thycotic.com/ ). Secret Server is basically password management system that not only stores and creates passwords (and gives you great auditing on who accessed what passwords), but can connect to a machine and change the password remotely. So for the users machines, if there on the road we can give them the local administrator password, and then we schedule it to be changed once they login to the network. For the server side, we automate changing the local admin passwords on all servers every xx days, and on service accounts every xx days. Really slick.
-Greg -----Original Message----- From: Angus Scott-Fleming [mailto:[email protected]] Sent: Wednesday, May 05, 2010 11:18 PM To: NT System Admin Issues Subject: Re: Kind of OT: Generic Accounts On 5 May 2010 at 21:09, Tim Evans wrote: > You can get passgen from Jesper's site: > http://msinfluentials.com/media/p/6532.aspx MSinfluentials.com ... the site for influential people ... Thanks. -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 Security Blog: http://geoapps.com/ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
