corsasport.co.uk
 

Corsa Sport » Message Board » Off Day » Geek Day » Server: Boss wants to know everyones passwords » Post Reply

Post Reply
Who Can Post? All users can post new topics and all users can reply.
Icon:
Formatting Mode:
Normal
Advanced
Help

Insert Bold text Insert Italicized text Insert Underlined text Insert Centered text Insert a Hyperlink Insert Email Hyperlink Insert an Image Insert Code Formatted text Insert Quoted text
Message:
HTML is Off
Smilies are On
BB Code is On
[img] Code is On
Post Options: Disable smileys?
Turn BBCode off?
Receive email notification of new replies?

Bart

posted on 16th May 07 at 13:38

nope, im the guy who it has fallen on.

Im an Electrical Design Engineer :D


Brett

posted on 16th May 07 at 13:13

I thought you were the IT guy, bart?


Bart

posted on 16th May 07 at 13:09

quote:
Originally posted by Steve
just get the client to right click on there inbox in outlook and adjust the permissions.

Then on another client goto file, open, other users folder


Oooh, i can see that now, very good.
Does that then share their whole inbox with that recipient? Or do they have to manually open it when they need to check the email?


RyanSxi

posted on 16th May 07 at 13:01

think council runs outlook on exchange

as you have to go on the exchange to get onto the councils contacts etc


Steve

posted on 16th May 07 at 12:59

just get the client to right click on there inbox in outlook and adjust the permissions.

Then on another client goto file, open, other users folder


Bart

posted on 16th May 07 at 12:57

quote:
Originally posted by RyanSxi
quote:
Originally posted by Bart
quote:
Originally posted by Tim
Email you can grant people read access to your mail box. Or grant Administrator full rights to all.


How would an administrator read someone elses emails? access their mailbox? I wasnt aware this was possible?


if your on a server, which i assume you are, if you go into properties on outlook you can add other people's usernames and give them rights to your email. so they can either read or send from your account. useful if your out of the office or on sick/leave


im not running outlook on the server, just exchange.
Ive been told its a very bad idea to run both together?


RyanSxi

posted on 16th May 07 at 12:56

quote:
Originally posted by Bart
quote:
Originally posted by Tim
Email you can grant people read access to your mail box. Or grant Administrator full rights to all.


How would an administrator read someone elses emails? access their mailbox? I wasnt aware this was possible?


if your on a server, which i assume you are, if you go into properties on outlook you can add other people's usernames and give them rights to your email. so they can either read or send from your account. useful if your out of the office or on sick/leave


Bart

posted on 16th May 07 at 12:54

quote:
Originally posted by Tim
Email you can grant people read access to your mail box. Or grant Administrator full rights to all.


How would an administrator read someone elses emails? access their mailbox? I wasnt aware this was possible?


RyanSxi

posted on 16th May 07 at 12:29

quote:
Originally posted by Steve
if you desperatly needed to get into a users account for whatever reason then just reset there password :boggle:


thats what we used to do when i was in IT. :thumbs:


RyanSxi

posted on 16th May 07 at 12:29

in the council where i work, some users share the same passwords eg winter1 then winter2 etc etc so if some1 is off and IT need the pc or they save stuff etc

but as pointed out above. theres other ways to give people access without dishing your password out.

tbh why bother with passwords may aswell just turn novell (or whatever you use) off


Steve

posted on 16th May 07 at 12:26

if you desperatly needed to get into a users account for whatever reason then just reset there password :boggle:


Ian

posted on 16th May 07 at 12:24

Two ways you can approach this. Either refuse and put a technical solution in place to allow access to emails and files as Tim suggests. That is the point of administrative users, which you are.

Alternatively, supply the list of passwords then give it a month before having one of your users download some porn. Mail the big boss, tell them that the users account has been used to download porn but get a statement off the user saying they were out of the office that day. Make sure you remind the big boss that the supervisor has the passwords and was at his desk on the afternoon in question.

He's obviously been reading too much legal crap to be quoting the difference between personal use and business use and the privacy issues therein. Its a simple IT issue - you don't have accountability if you share accounts.

Emergency access is very much more easily sorted using other means.

Also who ensures that the list is accurate? You going to ask staff to supply? I would change the hour after I had done for a start.


Steve

posted on 16th May 07 at 12:20

what tim said


Tim

posted on 16th May 07 at 12:02

Email you can grant people read access to your mail box. Or grant Administrator full rights to all.

Files an administrator should be able to read off the c$/d$ administrative shares.

No need to actually know the users pass. That's the whole point of having domain admins. Worst case you can still take ownership of a file and change permissions even if the user has locked it down.


Cosmo

posted on 16th May 07 at 10:03

if you can get to them anyway then there is no need for everyones passwords.

Tell him if he can think of some genuine reason for having them, where you couldnt do the job without them, then its a good idea, but until then to fuck off.

I wouldnt want to give people my password TBH!


Bart

posted on 16th May 07 at 10:00

My Supervisor (not the big boss), has decided that it would be in the companies interest to keep an up to date log of EVERYONES username/password for the computers (joining the sbs server).
The reasons for it is that if an important email is sent to someone, or someone has an important file on their PC then we can still get to it in an emergency.. which we could still do anyway.

Is there any data protection or privacy that stops this from happening? My supervisor aruges that its all business use and not personal so there should be no privacy.
Im strongly against this, there is no way i want a list of everyone’s passwords and there is no way im going to give anyone my password.

OF course this list would be kept only accessible by one or two managers.

Any have any suggestions or recommendations?

Adam