[27605] in resnet
Re: Handling of passwords for personal equipment brought in for service
daemon@ATHENA.MIT.EDU (Doughty, Marc)
Tue May 1 11:56:42 2012
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=14dae939986da50ecc04befb2547
Message-ID: <CAEPWjztS2gKvpmYVknq_WNf==Qp-+01_xHRLtC21w9cj0Vy5fQ@mail.gmail.com>
Date: Tue, 1 May 2012 11:23:04 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: "Doughty, Marc" <marc_doughty@brown.edu>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <217F4440EAC6E849B46369D132514BCD20C83F18@SN2PRD0802MB101.namprd08.prod.outlook.com>
--14dae939986da50ecc04befb2547
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable
I hate to tell you, but on Windows you're *much better off with users that
have NO passwords set than those who set simple ones* or are willing to
give them away, even to technicians. Accounts with no password aren't
allowed any remote access, they can't be 'hacked' from the outside.
Meanwhile, a user with a simple password or one they're willing to share is
once who's just asking to have their computer owned.
- Marc Doughty
"If you aren't sure who is the give-way vessel, you are the give-way
vessel."
On Mon, Apr 30, 2012 at 2:30 PM, Larry James <larry.james@unl.edu> wrote:
> We also get the local password for any computers left with us for virus
> clean-up. A shocking percentage of the students have no password set, the=
y
> get =93the speech=94 about needing one, but we don=92t force them. It=92s=
sometimes
> awkward for me when someone has a really bad password, (like their name),
> because at least they have one. ****
>
> ** **
>
> Larry James
> ResNet Manager 402-472-3535
> RM 123.1 501 Bldg (0203)
> 402-472-5227 ljames2@unl.edu****
>
> ** **
>
> *From:* Resnet Forum [mailto:RESNET-L@LISTSERV.ND.EDU] *On Behalf Of *Ces=
ar
> A Nau
> *Sent:* Monday, April 30, 2012 11:02 AM
>
> *To:* RESNET-L@LISTSERV.ND.EDU
> *Subject:* Handling of passwords for personal equipment brought in for
> service****
>
> ** **
>
> Good afternoon all,
>
> I wanted to get some opinions as to how your respective service centers g=
o
> about handling passwords for personal equipment that are brought in for
> service.
>
> The typical scenario here is that when a customer has a problem with thei=
r
> computer, they bring it to one of our IT Customer Care Centers and if the
> computer is required to stay for an extended period of time ... we ask th=
e
> customer for their password in order to access / install / un-install app=
s
> on their computer as necessary.
>
> When the computer is repaired and returned, we advise the student to
> please reset their password to something that only they would know.
>
> Our IT Security group does not agree with this method, as they would like
> for the customer to never give anyone their password.
>
> I completely understand from a security standpoint ... but for repair
> purposes, and taking into consideration the time it will take to repair,
> having to ask the customer to come back in order to enter their password
> each time, and overall customer satisfaction ... I just don't think its
> possible.
>
> Therefore I would like to know how you guys handle it at your schools. **=
*
> *
>
>
> - Do you guys require that they provide you with their password for
> repair? ****
> - Do you guys require that the customer return and enter User name and
> Password each time? ****
> - Do you guys require that the customer change their password when
> leaving their computer?****
>
>
> Any feedback would be appreciated.
>
> Thanks.
>
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
> Cesar A. Nau
> Assistant Director
> IT Customer Care
> Fordham University
> (718) 817-4598
> nau@fordham.edu
> www.fordham.edu/HelpIT
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D___________________________________________________ You are sub=
scribed to
> the ResNet-L mailing list. ****
>
> To subscribe, unsubscribe or search the archives, go to
> http://LISTSERV.ND.EDU/archives/resnet-l.html____________________________=
_______________________
> ****
> ___________________________________________________ You are subscribed
> to the ResNet-L mailing list.
>
> To subscribe, unsubscribe or search the archives, go to
> http://LISTSERV.ND.EDU/archives/resnet-l.html____________________________=
_______________________
>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--14dae939986da50ecc04befb2547
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: quoted-printable
I hate to tell you, but on Windows you're <i>much better off with users=
that have NO passwords set than those who set simple ones</i> or are willi=
ng to give them away, even to technicians. Accounts with no password aren&#=
39;t allowed any remote access, they can't be 'hacked' from the=
outside. Meanwhile, a user with a simple password or one they're willi=
ng to share is once who's just asking to have their computer owned.<br =
clear=3D"all">
<br>- Marc Doughty<br>"If you aren't sure who is the give-way vess=
el, you are the give-way vessel."<br>
<br><br><div class=3D"gmail_quote">On Mon, Apr 30, 2012 at 2:30 PM, Larry J=
ames <span dir=3D"ltr"><<a href=3D"mailto:larry.james@unl.edu" target=3D=
"_blank">larry.james@unl.edu</a>></span> wrote:<br><blockquote class=3D"=
gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-=
left:1ex">
<div lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:#1f497d">We also get the local pas=
sword for any computers left with us for virus clean-up. A shocking percent=
age of the students have no password set, they get =93the
speech=94 about needing one, but we don=92t force them. It=92s sometimes a=
wkward for me when someone has a really bad password, (like their name), be=
cause at least they have one.
<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:#1f497d"><u></u>=A0<u></u></span><=
/p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:#1f497d">Larry James<br>
ResNet Manager <a href=3D"tel:402-472-3535" value=3D"+14024723535" target=
=3D"_blank">402-472-3535</a><br>
RM 123.1 501 Bldg (0203)<br>
<a href=3D"tel:402-472-5227" value=3D"+14024725227" target=3D"_blank">402-4=
72-5227</a> <a href=3D"mailto:ljames2@unl.edu" target=3D"_blank">ljames2@un=
l.edu</a><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:"Ca=
libri","sans-serif";color:#1f497d"><u></u>=A0<u></u></span><=
/p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt;font-family:"=
;Tahoma","sans-serif"">From:</span></b><span style=3D"font-s=
ize:10.0pt;font-family:"Tahoma","sans-serif""> Resnet F=
orum [mailto:<a href=3D"mailto:RESNET-L@LISTSERV.ND.EDU" target=3D"_blank">=
RESNET-L@LISTSERV.ND.EDU</a>]
<b>On Behalf Of </b>Cesar A Nau<br>
<b>Sent:</b> Monday, April 30, 2012 11:02 AM</span></p><div class=3D"im"><b=
r>
<b>To:</b> <a href=3D"mailto:RESNET-L@LISTSERV.ND.EDU" target=3D"_blank">RE=
SNET-L@LISTSERV.ND.EDU</a><br>
<b>Subject:</b> Handling of passwords for personal equipment brought in for=
service<u></u><u></u></div><p></p>
<p class=3D"MsoNormal"><u></u>=A0<u></u></p>
<p class=3D"MsoNormal"><span style=3D"font-size:10.0pt;font-family:"Ar=
ial","sans-serif"">Good afternoon all,</span>
<br></p><div class=3D"im">
<br>
<span style=3D"font-size:10.0pt;font-family:"Arial","sans-se=
rif"">I wanted to get some opinions as to how your respective service =
centers go about handling passwords for personal equipment that are brought=
in for service.
</span><br>
<br>
<span style=3D"font-size:10.0pt;font-family:"Arial","sans-se=
rif"">The typical scenario here is that when a customer has a problem =
with their computer, they bring it to one of our IT Customer Care Centers a=
nd if the computer is required to stay for an extended
period of time ... we ask the customer for their password in order to acce=
ss / install / un-install apps on their computer as necessary.</span>
<br>
<br>
<span style=3D"font-size:10.0pt;font-family:"Arial","sans-se=
rif"">When the computer is repaired and returned, we advise the studen=
t to please reset their password to something that only they would know.</s=
pan>
<br>
<br>
<span style=3D"font-size:10.0pt;font-family:"Arial","sans-se=
rif"">Our IT Security group does not agree with this method, as they w=
ould like for the customer to never give anyone their password.</span>
<br>
<br>
<span style=3D"font-size:10.0pt;font-family:"Arial","sans-se=
rif"">I completely understand from a security standpoint ... but for r=
epair purposes, and taking into consideration the time it will take to repa=
ir, having to ask the customer to come back in order to
enter their password each time, and overall customer satisfaction ... I ju=
st don't think its possible.</span>
<br>
<br>
<span style=3D"font-size:10.0pt;font-family:"Arial","sans-se=
rif"">Therefore I would like to know how you guys handle it at your sc=
hools.</span>
<u></u><u></u></div><p></p><div class=3D"im">
<ul type=3D"disc">
<li class=3D"MsoNormal">
<span style=3D"font-size:10.0pt;font-family:"Arial","sans-se=
rif"">Do you guys require that they provide you with their password fo=
r repair?</span>
<u></u><u></u></li><li class=3D"MsoNormal">
<span style=3D"font-size:10.0pt;font-family:"Arial","sans-se=
rif"">Do you guys require that the customer return and enter User name=
and Password each time?</span>
<u></u><u></u></li><li class=3D"MsoNormal">
<span style=3D"font-size:10.0pt;font-family:"Arial","sans-se=
rif"">Do you guys require that the customer change their password when=
leaving their computer?</span><u></u><u></u></li></ul>
<p class=3D"MsoNormal"><br>
<span style=3D"font-size:10.0pt;font-family:"Arial","sans-se=
rif"">Any feedback would be appreciated.</span>
<br>
<br>
<span style=3D"font-size:10.0pt;font-family:"Arial","sans-se=
rif"">Thanks.</span> <br>
<br>
<span style=3D"font-size:10.0pt;font-family:"Arial","sans-se=
rif"">=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D<br>
Cesar A. Nau<br>
Assistant Director<br>
IT Customer Care<br>
Fordham University<br>
<a href=3D"tel:%28718%29%20817-4598" value=3D"+17188174598" target=3D"_blan=
k">(718) 817-4598</a><br>
<a href=3D"mailto:nau@fordham.edu" target=3D"_blank">nau@fordham.edu</a><br=
>
</span><a href=3D"http://www.fordham.edu/HelpIT" target=3D"_blank"><span st=
yle=3D"font-size:10.0pt;font-family:"Arial","sans-serif"=
;">www.fordham.edu/HelpIT</span></a><span style=3D"font-size:10.0pt;font-fa=
mily:"Arial","sans-serif""><br>
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D</span> ___________________________________________________ You ar=
e subscribed to the ResNet-L mailing list.
<u></u><u></u></p>
<p>To subscribe, unsubscribe or search the archives, go to <a href=3D"http:=
//LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_blank">
http://LISTSERV.ND.EDU/archives/resnet-l.html</a> _________________________=
__________________________
<u></u><u></u></p>
</div></div>
</div><div class=3D"HOEnZb"><div class=3D"h5">
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to <a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_=
blank">http://LISTSERV.ND.EDU/archives/resnet-l.html</a>
___________________________________________________
</p></div></div></blockquote></div><br>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--14dae939986da50ecc04befb2547--
