PC Review


Reply
Thread Tools Rate Thread

checking weak passwords?

 
 
sql beginner
Guest
Posts: n/a
 
      22nd Oct 2004
I must check user passwords on my company, because it is possible that they
use same words for username and password. some of them are sitting in
intranet, the others in country behind a firewall which makes port
forwarding to user computer to access computer remotely.
of course I have administrator rights and can login and check them manually
but I want to do it silently because I must check ca 150 computers and a lot
of more users so it takes too many time to explain the reason for everybody
How can I make it quicker?

veiko


 
Reply With Quote
 
 
 
 
jeffrey
Guest
Posts: n/a
 
      22nd Oct 2004
Hi,

why don`t you just adjust the security policies for the passords. You can
enforce password lenght, history, complex or non complex, etc. That way you
don`t really need to check. For my company I have the password lenght
minimun 8 characters, have to use complex characters in the password,
passord history is set to 8, so they have to create 8 new passwords before
they can reuse any, and renew is every 30 days.

Jeff

"sql beginner" <(E-Mail Removed)> wrote in message
news:evCScp$(E-Mail Removed)...
> I must check user passwords on my company, because it is possible that

they
> use same words for username and password. some of them are sitting in
> intranet, the others in country behind a firewall which makes port
> forwarding to user computer to access computer remotely.
> of course I have administrator rights and can login and check them

manually
> but I want to do it silently because I must check ca 150 computers and a

lot
> of more users so it takes too many time to explain the reason for

everybody
> How can I make it quicker?
>
> veiko
>
>


 
Reply With Quote
 
sql beginner
Guest
Posts: n/a
 
      22nd Oct 2004
yes but some workers are not in domain and far away and I instructed them by
mail how to set new strong passwords, But unfortunately some of them are
russians and can't maybe understand why it is important.

"jeffrey" <(E-Mail Removed)> wrote in message
news:O$(E-Mail Removed)...
> Hi,
>
> why don`t you just adjust the security policies for the passords. You can
> enforce password lenght, history, complex or non complex, etc. That way

you
> don`t really need to check. For my company I have the password lenght
> minimun 8 characters, have to use complex characters in the password,
> passord history is set to 8, so they have to create 8 new passwords before
> they can reuse any, and renew is every 30 days.
>
> Jeff
>
> "sql beginner" <(E-Mail Removed)> wrote in message
> news:evCScp$(E-Mail Removed)...
> > I must check user passwords on my company, because it is possible that

> they
> > use same words for username and password. some of them are sitting in
> > intranet, the others in country behind a firewall which makes port
> > forwarding to user computer to access computer remotely.
> > of course I have administrator rights and can login and check them

> manually
> > but I want to do it silently because I must check ca 150 computers and a

> lot
> > of more users so it takes too many time to explain the reason for

> everybody
> > How can I make it quicker?
> >
> > veiko
> >
> >

>



 
Reply With Quote
 
Mike Brannigan [MSFT]
Guest
Posts: n/a
 
      22nd Oct 2004
"sql beginner" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> yes but some workers are not in domain and far away and I instructed them
> by
> mail how to set new strong passwords, But unfortunately some of them are
> russians and can't maybe understand why it is important.
>


If there machines are not in the domain then unless you have the local
Administrator account name and password for each machine then there is very
little you can do.
If you can access them over your network then you can use various third
party tools to attempt to force the password from the machines so you can
see if they are complex or not.

As another note - if your company is sending e-mails to people telling them
to do things like use long passwords then technology is not always your only
option.
In a number of companies I have worked in if you failed to follow properly
issues company directives (such as mails from you) then you get sacked/fired
as your contract may say that you must follow all company orders and
directives, so ignoring one is breach of contract etc.

--

Regards,

Mike
--
Mike Brannigan [Microsoft]

This posting is provided "AS IS" with no warranties, and confers no
rights

Please note I cannot respond to e-mailed questions, please use these
newsgroups

"sql beginner" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> yes but some workers are not in domain and far away and I instructed them
> by
> mail how to set new strong passwords, But unfortunately some of them are
> russians and can't maybe understand why it is important.
>
> "jeffrey" <(E-Mail Removed)> wrote in message
> news:O$(E-Mail Removed)...
>> Hi,
>>
>> why don`t you just adjust the security policies for the passords. You
>> can
>> enforce password lenght, history, complex or non complex, etc. That way

> you
>> don`t really need to check. For my company I have the password lenght
>> minimun 8 characters, have to use complex characters in the password,
>> passord history is set to 8, so they have to create 8 new passwords
>> before
>> they can reuse any, and renew is every 30 days.
>>
>> Jeff
>>
>> "sql beginner" <(E-Mail Removed)> wrote in message
>> news:evCScp$(E-Mail Removed)...
>> > I must check user passwords on my company, because it is possible that

>> they
>> > use same words for username and password. some of them are sitting in
>> > intranet, the others in country behind a firewall which makes port
>> > forwarding to user computer to access computer remotely.
>> > of course I have administrator rights and can login and check them

>> manually
>> > but I want to do it silently because I must check ca 150 computers and
>> > a

>> lot
>> > of more users so it takes too many time to explain the reason for

>> everybody
>> > How can I make it quicker?
>> >
>> > veiko
>> >
>> >

>>

>
>



 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Specified key is a known weak key for 'DES' and cannot be used. =?Utf-8?B?Sm9lVXNlcg==?= Microsoft Dot NET Framework 0 25th Oct 2005 02:28 PM
Checking passwords? sql beginner Microsoft Windows 2000 Security 3 22nd Oct 2004 03:46 PM
weak printing species8350 Printers 1 8th Sep 2004 09:59 PM
List of common ' weak ' passwords. taff Anti-Virus 29 23rd Jan 2004 06:32 PM
Passwords not saves for checking emails Jaime Andersen Microsoft Outlook 1 22nd Nov 2003 05:28 PM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 03:56 AM.