|
Home > Archive > alt.certification.mcse > July 2003 > Managing User Accounts and Security
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Managing User Accounts and Security
|
|
|
| I have a question for you network administrator types. I am a pc tech for
an 1100 user network. We have 5 full time pctechs of which I am the lead
tech. I am not very bright when it comes to network and security but we
recently made a change that I think is not very smart.
The pc techs for our group often need to change a users password with the
user manager so we can log in as the user. When we are done we reset their
password and then they have to change it on the first log in. We also can
use the user manager to see where their profile is located (on one of
several servers) depending on the location.
Recently the network administrators took that privilege away from us and now
we can't change a users password. Everytime we need to trouble-shoot a
profile problem or if the user is not present we have to call our help desk
or an administrator.
I would like to know what other organizations are doing and what is the best
and most productive way to manage this problem? So far the pc techs are
wasting a lot of time on the phone and hunting down users. I would like
some best practice amunition to take to my superiors.
For what its worth we are installing Active Directory in a few weeks and
don't know how that will impact things.
Thanks
Pops
A+
| |
| Limeaid 2003-07-11, 2:26 am |
| This will change everything if they want it to
They'll be able to delegate rights to individuals and tailor their
permissions to their jobs.
As stated below they'll be able to give the group pc techs the ability to
change,unlock accounts if they so desire.
It was a terrible asspect of NT that you either had the keys to the city
or nothing for the most part.
3rd party tools such as bvadmin are used as work arounds to simulate an
AD environment in a NT domain.
"Pops" <whstephe@yahoo.com> wrote in
news:xFlPa.94$Nt1.65@fe04.atl2.webusenet.com:
> I have a question for you network administrator types. I am a pc tech
> for an 1100 user network. We have 5 full time pctechs of which I am
> the lead tech. I am not very bright when it comes to network and
> security but we recently made a change that I think is not very
> smart.
>
> The pc techs for our group often need to change a users password with
> the user manager so we can log in as the user. When we are done we
> reset their password and then they have to change it on the first log
> in. We also can use the user manager to see where their profile is
> located (on one of several servers) depending on the location.
>
> Recently the network administrators took that privilege away from us
> and now we can't change a users password. Everytime we need to
> trouble-shoot a profile problem or if the user is not present we have
> to call our help desk or an administrator.
>
> I would like to know what other organizations are doing and what is
> the best and most productive way to manage this problem? So far the
> pc techs are wasting a lot of time on the phone and hunting down
> users. I would like some best practice amunition to take to my
> superiors.
>
> For what its worth we are installing Active Directory in a few weeks
> and don't know how that will impact things.
>
> Thanks
>
> Pops
> A+
>
>
>
>
| |
| Slammer 2003-07-12, 11:25 am |
| For security purposes and liability, I would not let the PC techs have
access to password capabilities as an Administrator.....that my opinion if
it means anything.
--
Slammer
MCSA, CNA5, iNet+, Server+, Net+, A+,
CIW-Assoc.
| |
|
| From my observations most places with large networks have seperate local and
network administrator passwords. The PC techs can log on as local
administrator to install programs etc, however only the Network Admin people
can do it in their area. this seems to work very well in every situation I
have seen it in action.
|
|
|
|
|