Re: Forgot password option for users (process)

From: Doug Knox MS-MVP (dknox_at_mvps.org)
Date: 09/09/05 

Date: Fri, 9 Sep 2005 17:13:48 -0400

The only other option is to have the Help Desk use a domain admin account and reset the password, with all the usual warnings about encrypted files, encrypted e-mails and stored browser passwords. 

-- 
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
 
"Robert Moir" <robspamtrap+msnews@gmail.com> wrote in message news:OlK40LYtFHA.3752@TK2MSFTNGP09.phx.gbl...
> Doug Knox MS-MVP wrote:
>> Your question was for best practices.  This is the best practice.
>> Each user should create and keep safe a password reset disk.
> 
> I'd say that was totally impractical as a solution in a large enterprise 
> network. 
> 
>

Relevant Pages

  • Re: Restoring EFS and Passwords
    ... performed regularly using the default Windows Backup utility. ... reset it and, thus, locked them out of their EFS encrypted files. ... They still cannot decrypt the files, ...
    (microsoft.public.security)
  • Re: Security update - encrypted files access problem
    ... If you reset the password for an account using ... >ability to access the encrypted files - you were warned ... >> my second admin account and reset the password. ... >> original certificate and tried to import it. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Cannot access encrypted files.
    ... Did you happen to "reset" your password as that can cause you to loose ... > Suddenly I cannot access my encrypted files. ... > I updated Napster software. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: CANNOT EFS DECRYPT AFTER A GHOST RESTORE
    ... You did not follow the best practices of EFS. ... In the future - follow best practices and backup your key. ... in Windows Server 2003, in Windows 2000, and in Windows XP ... Using Efsinfo.exe to determine information about encrypted files ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Help! Administrator password problems
    ... Don't reset the password if you have any encrypted files. ... Decrypt them ... There's a Linux boot disk that can reset them. ...
    (microsoft.public.windowsxp.security_admin)