Re: Requiring a password?
- From: "Asher_N" <compguy666@xxxxxxxxxxx>
- Date: Thu, 15 Sep 2005 05:30:52 -0700
=?Utf-8?B?Sm9obiBXaWx0?= <JohnWilt@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
news:D96363D5-FA24-4124-A6D1-23D58D9972AC@xxxxxxxxxxxxx:
First off, I have to say that this scares me. Guys patrolling the streets
with guns think it's fun to send bogus e-mails under somebody else's
account. You have a bigger personnel problem on your hands.
Having said that, how about removing Outlook from the desktops and
forcing them to use OWA? It logs off after 15 minutes.
> Here is the background. I work for a small police department. When I
> came here they had MSMail. I moved us to Windows 2000 server with
> Exchange 5.5 with roaming profiles. We only have a a few PC's to do
> reports and some times users will get a call which requires them to
> leave immediately and they leave their computer unlocked. We went to
> automatically locking the workstations however if this occurs close to
> shift change the machine stays locked until that officer returns to
> work. Our report program is in FoxPro and I had the machines logging
> them off using Winexit but FoxPro doesn't allow the machine to shut
> down. Any suggestions to help with logging off or forcing passwords.
>
> "Ed Crowley [MVP]" wrote:
>
>> Exactly. I call this "BS Security". Because the user is logged on,
>> someone walking up to the workstation can simply change the
>> authentication method and still log on. Teach your users to lock
>> their workstations if they don't want their mail read.
>> --
>> Ed Crowley
>> MVP - Exchange
>> "Protecting the world from PSTs and brick backups!"
>>
>> "Rich Matheisen [MVP]" <richnews@xxxxxxxxxxxxxxxxxxxxx> wrote in
>> message news:20mgi1168i55l8cme5viek82lsp6a6snlc@xxxxxxxxxx
>> > John Wilt <JohnWilt@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
>> >
>> >>The machines are running XP Pro with Office 2000. Each user has
>> >>their own login and we are using ctrl-alt-del to log in. The only
>> >>problem we have is
>> >>when a user walks away from the machine to handle a call or
>> >>something. The
>> >>jokesters get ahold of the machine and send out bogus emails. I
>> >>have already
>> >>started changing machines to use "NONE" for authentication in the
>> >>Outlook.
>> >
>> > I don't see how this will help. If the desktop is left unattended
>> > it's probably safe to assume that they aren't going to exit the
>> > Outlook window -- and even if they do, if there's a "mail-aware"
>> > application running on the desktop then only the Outlook app will
>> > exit and leave the session connected to the mailbox. If youstart
>> > Outlook you won't be asked for credentials again until you exit ALL
>> > the applications that can use MAPI.
>> >
>> > Either set the screensaver to lock the desktop after a couple of
>> > minutes of inactivity, or have the users lock the desktop if they
>> > leave. Alt+Ctrl+Del and Enter is all it takes.
>> >
>> > If that doesn't work, enforce the e-mail policy and security policy
>> > you have and sanction a few of the "jokesters" and the people that
>> > don't lock their desktops. If you have a policy it's been approved
>> > by the right people, so start enforcing it. People will get the
>> > idea soon enough. If they don't, then have HR discipline them.
>> > Sooner or later you'll not have a problem.
>> >
>> >>How do you use office tools to create said policy?
>> >
>> > The office administration kits include policy templates.
>> >
>> > --
>> > Rich Matheisen
>> > MCSE+I, Exchange MVP
>> > MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
>> > Don't send mail to this address mailto:h.pott@xxxxxxxxxxxxx
>>
>>
>>
>
.
- Follow-Ups:
- Re: Requiring a password?
- From: John Wilt
- Re: Requiring a password?
- Prev by Date: Re: URGENT!!!!! EXCHANGE POP3
- Next by Date: Re: Transation log
- Previous by thread: 2nd Exchange 2003 Server install failed during setup. PLEASE HELP!
- Next by thread: Re: Requiring a password?
- Index(es):
Relevant Pages
|
