Security
by lordinfidel
What I have done, and since I have a win2k machine and certificate services, plus a PGP system.
I created myself a PGP disk on my drive and gave it a pretty good password.
Next I went ahead and encrypted the drive using EFS.
Next once I mounted the PGP drive, I created a text document inside of it and entered in my passwords.
The root drive is not shared and can not be accessed via the network. All permissions have been removed from the root drive with the exception of domain admins.
This is an extreme measure I know. But you asked.
Several important things when using EFS; Make sure you export your certificate. If you fail to do so and something happens to your machine, you will not be able to access that data.
Another length that I go to is that I print out the password list as a hard copy and it remains offsite in a secure fireproof location that only a few people have access to. (just in case of the admins demise)
A few things I do suggest in regards to passwords.
Make some standards. Not every machine needs to have a different password.
By this I mean group your servers together logically. Have the same username and password for each.
User passwords should never be kept. This is for yourown safety. If they forget theirs, reset it.
Just my 2 sense. I am sure that many will disagree with my above statements.
Enjoy
by admin
I have a palm that I use to store the passwords that I need to know. I also have a security program that allows me to password the memo pad where I have the passwords written down. Also, I have an extra level of secuirty when I am at the office becuase, while I am at the office it never leaves my holder or hand. When, I am at home I don't worry about anyone viewing the passwords.
Leonard E. Davis II
by ms
Users password should not be stored cause they`re changing to fast (14 days -30 days)
Other passwords - > store it on personalised smartcard (maybe not 100 but 15 why not)
This discussion is closed to new replies.
Sort by Trending