RE: Password Protected Screen Saver and Administrative Password

From: Tom Milliner (tom.milliner_at_verizon.net)
Date: 02/09/05

  • Next message: offtopic: "Re[2]: disclosure the administrative password" 
    To: "'Tyson Leslie'" <Leslie.Tyson@colteng.com>, <focus-ms@securityfocus.com>
Date: Tue, 8 Feb 2005 19:56:55 -0600

    The server is logged in as administrator, with the password
    protected screen-saver in place. I believe the screen-saver
    offers some protection (the server room is not secure...it
    doubles as a copier room).

    When a third party vendor needs to do their "thing," e.g.
    maintenance to their program, they need access via GoToMyPC.
    If I am not there, I want a trusted co-worker who does not
    do administrative duties to simply put in the screen-saver
    password. The vendor does their work, and after a bit,
    the screen-saver kicks in again.

    I want to give the trusted co-worker a way to unlock the
    screen-saver for that period of time, and not have to give
    them the administrator password (which Microsoft requires to
    unlock the screen-saver).

    I think there ought to be a way to unlock the screen-saver
    without giving the master key to a trusted co-worker. The
    trusted key can be used to do harm from the trusted co-worker's
    PC (it is unlikely that a non-administrator is going to play
    around at the console in the computer room).

    It's not great, but since I cannot always be present, I need
    to use a trusted co-worker to this extent.

     
    Tom Milliner, CPA, MCSE
    2404 Summer Place Dr.
    Irving, TX 75062
    (214) 540-2741
    tom.milliner@verizon.net

    -----Original Message-----
    From: Tyson Leslie [mailto:Leslie.Tyson@colteng.com]
    Sent: Tuesday, February 08, 2005 3:23 PM
    To: focus-ms@securityfocus.com
    Subject: RE: Password Protected Screen Saver and Administrative Password

    You are giving them access to use the server with an administrator
    logged in, but you won't tell them the administrator password?

    Is that correct? Or, is the server not logged in, and they need to log
    into it?

            Tyson.

    -----Original Message-----
    From: Tom Milliner [mailto:tom.milliner@verizon.net]
    Sent: Monday, February 07, 2005 8:07 PM
    To: tom.milliner@verizon.net; focus-ms@securityfocus.com
    Subject: Password Protected Screen Saver and Administrative Password

     
     
    Does someone know a way to allow a normal user to release a server
    password protected screen-saver without giving the user the
    administrator password?

    I need this so that third-party support can access our server via
    GoToMyPC when I am not there. The password protected screen-saver
    blocks them from remote access to fix problems. I cannot always be
    on-site to assist by supplying the screen-saver password.

     
    Tom Milliner, CPA, MCSE
    tom.milliner@verizon.net

    ------------------------------------------------------------------------ 

    ---
------------------------------------------------------------------------
---
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
  • Next message: offtopic: "Re[2]: disclosure the administrative password"

    Relevant Pages

    • RE: Password Protected Screen Saver and Administrative Password
      ... GoToMyPc allows this vendor to easily setup access to their ... The server in question is a member server which must be ... domain administrator to logon to it, ... For instance, let's say the screen-saver is locked, but the ...
      (Focus-Microsoft)
    • Re: Password Protected Screen Saver and Administrative Password
      ... I think the suggestion of a local admin was for the remote vendor, ... you log into the member server as the domain ... domain administrator. ... > there would be no password protected screen-saver to ...
      (Focus-Microsoft)
    • Types of Accounts.
      ... After that, every time the screen-saver came on, there ... Before I loaded the HP digital camera software, ... the "computer administrator", I found out having ... account to a Limited Account, it said the computer had to ...
      (microsoft.public.windowsxp.general)
    • Re: Types of Accounts.
      ... An administrator account allow you, as administrator, to access all areas. ... In other words you can install software, install downloads, make changes to ... > After that, every time the screen-saver came on, there ...
      (microsoft.public.windowsxp.general)
    • Re: Password Protected Screen Saver and Administrative Password
      ... In an ideal world for the vendor, ... > server is in a common area, ... administrator account for general use of the server. ... > protected screen-saver after 60 minutes of inactivity. ...
      (Focus-Microsoft)
    • Quantcast