RE: How to authentificate an user via telephon?

From: McLaughlin, Bryan (bsm14096@ad.creighton.edu)
Date: 12/04/02

  • Next message: Nexus: "Re: Permissions"
    Date: Wed, 4 Dec 2002 11:42:57 -0600
    From: "McLaughlin, Bryan" <bsm14096@ad.creighton.edu>
    To: "Robert Sieber" <rsieber@web.de>, <security-basics@lists.securityfocus.com>
    
    

    Robert,

    In a past life we would send the new password to a known email address
    for the person whose account is reset. If email is not available we
    would leave the reset password on the users voice mail. Both systems
    would only be accessible by the person whose account is reset. If
    someone other than the owner of the account requests a reset, the
    account is still safe, assuming email and vmail are secure.

    Bryan

    -----Original Message-----
    From: Robert Sieber [mailto:rsieber@web.de]
    Sent: Tuesday, December 03, 2002 12:50 PM
    To: security-basics@lists.securityfocus.com
    Subject: How to authentificate an user via telephon?

    Hello colleauges,

    imaging the following situation:

    User calls the helpdesk to reset/alter some kind
    of account-password (NT, RAS, PKI-PIN ...) and you
    has to determin wheter the user is the correct
    (owner of the account) user. What would you do
    to authentificate the users identity?

    What are good methodes to do this? It should be
    easy for the user but secure for the administration.

    Robert

    -- 
    http://board.protecus.de - Firewalls, Security and more ...
     
    


    Relevant Pages

    • Single sign on
      ... How to authentificate an user via telephon? ... > Avatier has a product which would allow users to reset their own passwords ... >> for the person whose account is reset. ... >> would only be accessible by the person whose account is reset. ...
      (Security-Basics)
    • RE: SIDS show instead of user names
      ... I used Netdom to reset the account and the utility acknowledged that the ... secure channel was reset, but it didn't fix the problem. ... I agree with you that we may have a try to reset computer account. ... Vincent Xu ...
      (microsoft.public.win2000.active_directory)
    • RE: Password disappears
      ... account password will be reset to empty automatic. ... SBS infected by Trojan horse. ... Configure account lockout policy. ...
      (microsoft.public.windows.server.sbs)
    • RE: Quick question on resetting computer accounts in AD
      ... and recreating the account. ... Is it okay to use the reset account function? ... SBS Server Management console does not have "Reset Account" command to ... In fact, the SBS Server Management console has already integrated ADUC, you ...
      (microsoft.public.windows.server.sbs)
    • RE: Reset of local user password deleted compressed folders
      ... I suggest you search the hard disk to confirm if the files are deleted. ... For any of the following resolutions to work, the user's original account ... This password recovery disk must have ... Click "use your password reset disk". ...
      (microsoft.public.windowsxp.security_admin)