[27594] in resnet
Re: Handling of passwords for personal equipment brought in for service
daemon@ATHENA.MIT.EDU (Bud Hiller)
Mon Apr 30 12:27:51 2012
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=e89a8fb200aa575d4b04bee7d181
Message-ID: <CAJYsP4Zo6uLTS1zfntD=95dW77mpPvLmwdvnso7ves5k+8AXsA@mail.gmail.com>
Date: Mon, 30 Apr 2012 12:19:04 -0400
Reply-To: bud.hiller@bucknell.edu
From: Bud Hiller <dhiller@bucknell.edu>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <OFBC448928.64DDED9E-ON852579ED.00712AF9-852579F0.005807B6@fordham.edu>
--e89a8fb200aa575d4b04bee7d181
Content-Type: text/plain; charset=ISO-8859-1
Hi Cesar,
Since you say personal equipment, I'm assuming that you are talking about a
local password for this computer, not their domain/netowrk/Fordham password
that would also access all of their personal email, etc.
When students drop off their computers for repair or service here at
Bucknell, we always ask for their passwords as part of the check-in
process. Like you, we agree that it would be impossible to install or
troubleshoot anything without it.
It's a completely different story if it's a university password.
Bud
Bucknell
On Mon, Apr 30, 2012 at 12:01 PM, Cesar A Nau <nau@fordham.edu> wrote:
> Good afternoon all,
>
> I wanted to get some opinions as to how your respective service centers go
> about handling passwords for personal equipment that are brought in for
> service.
>
> The typical scenario here is that when a customer has a problem with their
> computer, they bring it to one of our IT Customer Care Centers and if the
> computer is required to stay for an extended period of time ... we ask the
> customer for their password in order to access / install / un-install apps
> on their computer as necessary.
>
> When the computer is repaired and returned, we advise the student to
> please reset their password to something that only they would know.
>
> Our IT Security group does not agree with this method, as they would like
> for the customer to never give anyone their password.
>
> I completely understand from a security standpoint ... but for repair
> purposes, and taking into consideration the time it will take to repair,
> having to ask the customer to come back in order to enter their password
> each time, and overall customer satisfaction ... I just don't think its
> possible.
>
> Therefore I would like to know how you guys handle it at your schools.
>
> - Do you guys require that they provide you with their password for
> repair?
> - Do you guys require that the customer return and enter User name and
> Password each time?
> - Do you guys require that the customer change their password when
> leaving their computer?
>
>
> Any feedback would be appreciated.
>
> Thanks.
>
> ============================
> Cesar A. Nau
> Assistant Director
> IT Customer Care
> Fordham University
> (718) 817-4598
> nau@fordham.edu
> www.fordham.edu/HelpIT
> ============================___________________________________________________ You are subscribed to
> the ResNet-L mailing list.
>
> To subscribe, unsubscribe or search the archives, go to
> http://LISTSERV.ND.EDU/archives/resnet-l.html___________________________________________________
>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--e89a8fb200aa575d4b04bee7d181
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
<font color=3D"#000000"><font>Hi Cesar,</font></font><div><font color=3D"#0=
00000"><font><br></font></font></div><div><font color=3D"#000000"><font>Sin=
ce you say personal equipment, I'm assuming that you are talking about =
a local password for this computer, not their domain/netowrk/Fordham passwo=
rd that would also access all of their personal email, etc.=A0</font></font=
></div>
<div><font color=3D"#000000"><font><br></font></font></div><div><font color=
=3D"#000000"><font>When students drop off their computers for repair or ser=
vice here at Bucknell, we always ask for their passwords as part of the che=
ck-in process. Like you, we agree that =A0it would be impossible to install=
or troubleshoot anything without it.</font></font></div>
<div><font color=3D"#000000"><font><br></font></font></div><div><font color=
=3D"#000000"><font>It's a completely different story if it's a univ=
ersity password.=A0</font></font></div><div><font color=3D"#000000"><font><=
br>
</font></font></div>
<div><font color=3D"#000000"><font>Bud</font></font></div><div><font color=
=3D"#000000"><font>Bucknell<br></font></font><br><div class=3D"gmail_quote"=
>On Mon, Apr 30, 2012 at 12:01 PM, Cesar A Nau <span dir=3D"ltr"><<a hre=
f=3D"mailto:nau@fordham.edu" target=3D"_blank">nau@fordham.edu</a>></spa=
n> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><font face=3D"sans-serif">Good afternoon all=
,</font>
<br>
<br><font face=3D"sans-serif">I wanted to get some opinions as to
how your respective service centers go about handling passwords for persona=
l
equipment that are brought in for service. </font>
<br>
<br><font face=3D"sans-serif">The typical scenario here is that when
a customer has a problem with their computer, they bring it to one of our
IT Customer Care Centers and if the computer is required to stay for an
extended period of time ... we ask the customer for their password in order
to access / install / un-install apps on their computer as necessary.</font=
>
<br>
<br><font face=3D"sans-serif">When the computer is repaired and returned,
we advise the student to please reset their password to something that
only they would know.</font>
<br>
<br><font face=3D"sans-serif">Our IT Security group does not agree
with this method, as they would like for the customer to never give anyone
their password.</font>
<br>
<br><font face=3D"sans-serif">I completely understand from a security
standpoint ... but for repair purposes, and taking into consideration the
time it will take to repair, having to ask the customer to come back in
order to enter their password each time, and overall customer satisfaction
... I just don't think its possible.</font>
<br>
<br><font face=3D"sans-serif">Therefore I would like to know how you
guys handle it at your schools.</font>
<br>
<ul>
<li><font face=3D"sans-serif">Do you guys require that they provide
you with their password for repair?</font>
</li><li><font face=3D"sans-serif">Do you guys require that the customer
return and enter User name and Password each time?</font>
</li><li><font face=3D"sans-serif">Do you guys require that the customer
change their password when leaving their computer?</font></li></ul>
<br><font face=3D"sans-serif">Any feedback would be appreciated.</font>
<br>
<br><font face=3D"sans-serif">Thanks.</font>
<br>
<br><font face=3D"sans-serif">=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<br>
Cesar A. Nau<br>
Assistant Director<br>
IT Customer Care<br>
Fordham University<br>
<a href=3D"tel:%28718%29%20817-4598" value=3D"+17188174598" target=3D"_blan=
k">(718) 817-4598</a><br>
<a href=3D"mailto:nau@fordham.edu" target=3D"_blank">nau@fordham.edu</a><br=
>
</font><a href=3D"http://www.fordham.edu/HelpIT" target=3D"_blank"><font fa=
ce=3D"sans-serif">www.fordham.edu/HelpIT</font></a><font face=3D"sans-serif=
"><br>
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D</font>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to <a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_=
blank">http://LISTSERV.ND.EDU/archives/resnet-l.html</a>
___________________________________________________
</p></blockquote></div><br></div>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--e89a8fb200aa575d4b04bee7d181--