Good memory + Generous Password Expiration (120 days for normal accounts / 180 days for admin accounts) + Password Corral
* * *ASB* *http://about.me/Andrew.S.Baker* *Harnessing the Advantages of Technology for the SMB market… * On Mon, Jul 11, 2011 at 11:24 PM, Kurt Buff <[email protected]> wrote: > I've been thinking that would be a good idea, but don't have my first > two accounts figured out yet. I want to get to that point sooner > rather than later, especially since we'll be migrating to Ex2010 > soonish, and I want to use a different account for that, and then set > up an account for administering workstations. > > How do you keep your passwords straight? I use password safe, for the most > part. > > Kurt > > On Mon, Jul 11, 2011 at 18:31, Jonathan Link <[email protected]> > wrote: > > I'm running three accounts generally, and sometimes a fourth. > > Personal everyday work account, no admin access anywhere. > > Workstation admin account for general admin tasks on my machine and > machines > > I'm not concerned about being infected with something. > > Domain admin account for accessing servers, only. > > I also have a honeypot account that I enable to interactively login to a > > live machine, and disable once I'm done, it's in the workstation admin > > group. > > > > On Mon, Jul 11, 2011 at 9:03 PM, Kurt Buff <[email protected]> wrote: > >> > >> I'm collecting a bunch of command lines for launching my tools from a > >> non-elevated prompt (either Start/Run, or a shell), but some just > >> don't work well, and I keep an elevated command prompt for just that > >> purpose. > >> > >> I'm working at making my personal account a non-admin on my own > >> machine, and everywhere else, and using a specific DA account for the > >> things I need to do those kinds of tasks. > >> > >> Kurt > >> > >> On Mon, Jul 11, 2011 at 17:17, Hilderbrand, Doug > >> <[email protected]> wrote: > >> >>> I have a few apps that prompt me every time I run them. > >> > > >> > For the 2 apps that trip UAC every time I run them (for no discernable > >> > reason: > >> > I think it's because of a localmachine registry key), > >> > I: > >> > * created a scheduled task (with no trigger) > >> > * turned on the "Run with highest privileges" option > >> > * created shortcut to C:\Windows\System32\schtasks.exe /run /tn > >> > "Taskname" > >> > > >> > No UAC prompt. > >> > > >> > > >> > Doug Hilderbrand | Systems Analyst, Information Technology | Crane > >> > Aerospace & Electronics > >> > > >> > > >> > -----Original Message----- > >> > From: Joseph Heaton [mailto:[email protected]] > >> > Sent: Thursday, June 30, 2011 8:10 AM > >> > To: NT System Admin Issues > >> > Subject: Re: Win7 UAC - is your on or off? > >> > > >> > I'm an admin on my own machine, but I still have UAC running. I have > a > >> > few apps that prompt me everytime I run them. > >> > > >> >>>> David Lum <[email protected]> 06/30/11 7:34 AM >>> > >> > Do any of you turn this off? I had our Service Desk Manager look at me > >> > like I had two heads when I told him I don't turn mine off and I asked > >> > "yours is off?" and he answered "It's me, I know when I am doing > >> > something to my system...". > >> > > >> > I swear I read somewhere there is good reason to keep UAC on and just > >> > throttle down the prompts (with Win7 I've left it at default), but > I'll > >> > be damned if I can find it at the moment. I thought it was a Minasi or > >> > other level of author. > >> > > >> > Desmond? > >> > David Lum > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
