I am looking to see how others deal with contractors/non-employee vpn access.
- How do you provision/deactivate their
accounts?
- Are they in your AD or are they in another account silo?
- How do you restrict them so they only have access to what they where hired to work on?
- How do you manage passwords?
- Are they forced to change their password?
- How is the password provided to them?
- Do you use any form of Network Access Control/security scanning of their computers?