29.04.2017, 21:58
Password security in large companies is an absolute joke. Place where I do my internship is just like that. Three IT guys (including myself) managing a network of ~300 computers, regularly having to ask "what's your password?" over the phone. Even though we have multiple tools to change the password to gain access to a locked computer or account. Users simply don't like their passwords being changed.
When we do reset a password (forgotten or expired) we will usually make something up and tell it to the user over the phone, rather than using the inbuilt options ("generate random password" and "user must change password at next logon"). Convenience is obviously more important than any real security.
Sorry for this off-topic anecdote.
When we do reset a password (forgotten or expired) we will usually make something up and tell it to the user over the phone, rather than using the inbuilt options ("generate random password" and "user must change password at next logon"). Convenience is obviously more important than any real security.
Sorry for this off-topic anecdote.