On our network, there are a few desktop computers that run software that monitors calls placed using our PBX. The software needs to run in a user context, so there is a domain account created for each of these desktops. They are left logged in all the time with the screen locked.
The software also has a reporting feature built in, so every few days a staff member logs into that computer to perform a report, then sends it to a manager. Because the person who regularly does this is sometimes away, there are actually about three people that need to know the password to log into this machine.
There are several problems I would like to address:
- If the computer is restarted, I need to manually log-in all the accounts.
- Users can barely remember one good password, let alone two.
- Best practice dictates a 1-1 mapping between people and accounts for auditing purposes.
Have you encountered any software like this, and if so, how have you dealt with it? The only idea I've been able to come up with is finding better software. I'd like to avoid that route if possible.