Windows 2000 Login process

From: Ryan Lambert (invalid@lacking.info)
Date: 03/04/03 

From: "Ryan Lambert" <invalid@lacking.info>
Date: Tue, 4 Mar 2003 05:08:19 -0800

I agree.

Not worth it. Enforcing strong passwords is a must in
organizations like that.

I would also not:

A) Advocate writing them on a sticky note or paper
B) Store them on the local hard disk

This seems to be common among people who don't like to
remember passwords. If there is a need to store passwords,
what I have done in the past is install a program like
Whisper (which is encrypted, and can be password
protected), and store the file on a floppy disk. Whenever
I needed a password, I'd pop it in, snatch the password
and pop it back out. Any time I wasn't using it, I had it
locked up.

That is an option I suppose, but you need to then
emphasize strong physical security. I wouldn't compromise
confidential data like that, though.

>-----Original Message-----
>That would be a security violation. Especially if you're
>in the health industry. They need to be concerned of the
>rights of the patients and what information could be made
>available to anyone without a login.
>
>>-----Original Message-----
>>I need to know if there is a way to skip the login
>process
>>on a Windows 2K Pro station. I have a standalone server
>>that dials out using a ISDN connection that has its own
>>autentication. My user says its to HARD to rember all
>>login accounts and passwords.
>>
>>TX John
>>.
>>
>.
>

Relevant Pages

  • Re: Decrypt
    ... that you store the encrypted passwords on the server. ... In fact, don't just hash the passwords, but combine the password ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: How to test that I configured httpd+Subversion wirh Path Based Authorization in the right way?
    ... client, 'svn', stores all passwrds locally in cleartext. ... MUAs or FTP passwords? ... And other VCS-es store their passwords ...
    (comp.os.linux.security)
  • Re: secure storage in Active Directory
    ... AD does not store user account passwords - it stores a hash of ... > I understand that the Active Directory stores user data and passwords. ... > How does it store these securely within its internal structure? ... they store the password hash. ...
    (microsoft.public.win2000.security)
  • Re: Windows Authentication (asp.net 1.1 C#)
    ... it is up to you how you store your passwords - FormsAuth is just a mechanism ... Usually you store the passwords in a database using salted hashes - have a look at PasswordDeriveBytes class ... Authentication or Form Authentication. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: secure storage in Active Directory
    ... AD does not store user account passwords - it stores a hash of ... > I understand that the Active Directory stores user data and passwords. ... > How does it store these securely within its internal structure? ... they store the password hash. ...
    (microsoft.public.security)