Procedures, policies and constraints on password entry, lifetime, change, strength, and storage. An essential part of access management, together with policies on other forms of authentication.

learn more… | top users | synonyms

1
vote
3answers
229 views

Active Directory Account Creation

We are creating the AD account and password automatically. The Helpdesk will not know the password or use it in way. I'm looking for other companies that are maybe doing the same type of procedure. ...
1
vote
1answer
77 views

Documentation and password storage for a web hosting company

I am in the process of designing and building a documentation and password storage point with the following ingredients: Suffice from service outages Automatic backups Keeping security and ...
0
votes
1answer
99 views

windows 2008 R2 add another local administrator account without knowing administrator password

I have physical access to a windows 2008 R2 server, I am trying to add a second local administrator account without knowing the original administrator password. It's important that the original ...
0
votes
1answer
22 views

SSL Cert on a 2003 DC for password management

I am looking to implement a self help password management system, I have found this: http://code.google.com/p/pwm/ I have a test server setup but constantly fail to get it to read AD with the test ...
0
votes
1answer
502 views

How to run smbpasswd as root on AIX?

I have Hitachi ID Password Manager (formerly p-synch) set up to change the password on (among other systems) an aix 6.1 server running samba. p-synch has the capability of executing additional ...
3
votes
0answers
69 views

Outlook Change Password Prompt - What enables this, and what do I put for Exchange Server?

One of my end users sent me this screen, which is obviously indicative of an expired user password I'm unable to replicate this in my lab, nor do I know what value to put in for Exchange. (is it ...
1
vote
0answers
18 views

Where do you store shared secrets used in building VMs dynamically (phoenix servers)?

We use vagrant to spin up linux VMs for dev, testing, and evaluation servers for our software. Most often, devs are using linux from VMs inside an AD-connected windows7 box. The configuration of the ...
0
votes
0answers
11 views

AD LDS changing password events

We've implemented AD LDS and we want to monitor password changes on it. However, the events I see doesn't provide much information. The only thing I see is this 4793 event (Security logs) The ...
0
votes
0answers
9 views

How to suppress request string logging in App Engine to secure passwords

I am designing an app for Google App Engine. In my initial set up, I have the user submit their username and password to my app via AJAX. I then hash it and compare that to a stored hash without ...