Re: Forgot password option for users (process)

From: Robert Moir (robspamtrap+msnews_at_gmail.com)
Date: 09/09/05 

Date: Fri, 9 Sep 2005 22:21:40 +0100

Doug Knox MS-MVP wrote:
> The only other option is to have the Help Desk use a domain admin
> account and reset the password, with all the usual warnings about
> encrypted files, encrypted e-mails and stored browser passwords.

There are a good few options out there, some of which I outline in my other
reply on this thread. In a properly managed domain environment, which is
what I'd expect an "enterprise" network to be, things like EFS encryption
should be very well managed so that the IT team can either recover such
documents if something happens to the original account or EFS should be
hobbled so that users can't turn it on and burn themselves.

Incidentally, since Win 2000, when ever has a frontline helpdesk call
handler needed domain admin to simply reset a password? 

-- 
-- 
Rob Moir
Website - http://www.robertmoir.co.uk
Virtual PC 2004 FAQ - http://www.robertmoir.co.uk/win/VirtualPC2004FAQ.html
Kazaa - Software update services for your Viruses and Spyware.

Relevant Pages

  • Re: Password problems..
    ... Even in Safe Mode, I can't reset the admin password or get to the control ... You may find that you need a password reset utility. ... and you even think you might have invoked encryption, ... scans) using a local account that has no password. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: SBS 2003 Admin Password Reset
    ... The Petri "Forgot the Administrator's Password" is for local administator ... which explains how to first reset the local administrator account password, ... There was no other Domain Admin Accounts setup yet. ...
    (microsoft.public.windows.server.sbs)
  • Re: Forgot password option for users (process)
    ... I don't deal with domains, other than our IT department, and they always insist it takes a domain admin account. ... > what I'd expect an "enterprise" network to be, things like EFS encryption ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Password disappears
    ... account password will be reset to empty automatic. ... SBS infected by Trojan horse. ... Configure account lockout policy. ...
    (microsoft.public.windows.server.sbs)
  • Re: Finding a Hacker
    ... definitely had the capability to obtain the domain admin credentials and may ... If the hacker did get in remotely using an administrator account on the ... Your problem is not restricting remote desktop connections. ...
    (microsoft.public.windows.server.active_directory)