ctrl alt delete log in question

[Susan.Adkins]

So hypothetically speaking, lets say I have a 3rd party program *web
based* that allowes users to get a new password for themselfs if they
forget theirs.

Now lets say that they forgot their password to login to the computer,
hence not allowing them to get to a webpage. Sure you could say ask
someone else to use their computer but we are going to say no one is
around, and you can't call IT to change the password for you.

besides haveing a default username and password that everyone knows to
use that, is there anotherr way or is there a way to set it up so the
default only allows you to stay on it for like x-number of minutes?

 

[Robert Moir]

So hypothetically speaking, lets say I have a 3rd party program *web
based* that allowes users to get a new password for themselfs if they
forget theirs.

Now lets say that they forgot their password to login to the computer,
hence not allowing them to get to a webpage. Sure you could say ask
someone else to use their computer but we are going to say no one is
around, and you can't call IT to change the password for you.

besides haveing a default username and password that everyone knows to
use that, is there anotherr way or is there a way to set it up so the
default only allows you to stay on it for like x-number of minutes?

Hmmm. This came up recently on the active directory mailing list. Long
story short, there is no reliable way of doing this and keeping it secure
without modifying the GINA (and that has issues of its own with Vista
coming soon). I don't think we found a solution everyone was happy with.
You can find the whole thread at
http://www.mail-archive.com/[email protected]/msg43780.html


--
--
Rob Moir, Microsoft MVP for Security
Blog Site - http://www.robertmoir.com
Virtual PC 2004 FAQ -
http://www.robertmoir.co.uk/win/VirtualPC2004FAQ.html
I'm always surprised at "professionals" who STILL have to be asked:
"Have you checked (event viewer / syslog)".