checking weak passwords?

  • Thread starter Thread starter sql beginner
  • Start date Start date
S

sql beginner

I must check user passwords on my company, because it is possible that they
use same words for username and password. some of them are sitting in
intranet, the others in country behind a firewall which makes port
forwarding to user computer to access computer remotely.
of course I have administrator rights and can login and check them manually
but I want to do it silently because I must check ca 150 computers and a lot
of more users so it takes too many time to explain the reason for everybody
How can I make it quicker?

veiko
 
Hi,

why don`t you just adjust the security policies for the passords. You can
enforce password lenght, history, complex or non complex, etc. That way you
don`t really need to check. For my company I have the password lenght
minimun 8 characters, have to use complex characters in the password,
passord history is set to 8, so they have to create 8 new passwords before
they can reuse any, and renew is every 30 days.

Jeff
 
yes but some workers are not in domain and far away and I instructed them by
mail how to set new strong passwords, But unfortunately some of them are
russians and can't maybe understand why it is important.
 
sql beginner said:
yes but some workers are not in domain and far away and I instructed them
by
mail how to set new strong passwords, But unfortunately some of them are
russians and can't maybe understand why it is important.
Click to expand...

If there machines are not in the domain then unless you have the local
Administrator account name and password for each machine then there is very
little you can do.
If you can access them over your network then you can use various third
party tools to attempt to force the password from the machines so you can
see if they are complex or not.

As another note - if your company is sending e-mails to people telling them
to do things like use long passwords then technology is not always your only
option.
In a number of companies I have worked in if you failed to follow properly
issues company directives (such as mails from you) then you get sacked/fired
as your contract may say that you must follow all company orders and
directives, so ignoring one is breach of contract etc.

--

Regards,

Mike
--
Mike Brannigan [Microsoft]

This posting is provided "AS IS" with no warranties, and confers no
rights

Please note I cannot respond to e-mailed questions, please use these
newsgroups
 
Back
Top