Re: Admin Passwords on workstations

From: Seeker (newsgroups@minusthespam.pcuptime.com)
Date: 01/16/03 

From: "Seeker" <newsgroups@minusthespam.pcuptime.com>
Date: Thu, 16 Jan 2003 16:28:03 GMT

> I use a program called Hyena, you can download a demo and test it to
> see if it will work for you. since you are a Novell shop it may not
> due the job.

I use Hyena in a mixed environment and it works well. We are about to
deploy WinXP workstations and I have a similar question. It seems that I
have two options. The first is to assign each workstation a random strong
administrator password as it is initially set up. Since no one should be
using the Admin account it makes sense. This has the benefit of not using
one password for this powerful account, but makes aging difficult. The
other option is to use one strong password and periodically change it with
Hyena, or change it if there is any indication that someone knows it.

What is the best practice here, based on the balance between security and
real-world administration?