Except for the fact that logon hour restrictions only prevent new logons (so your cleaning crew would have to have a password) they do not force a disconnect on an existing logged account. If your users leave their machines logged in when they leave at night ("memory" problems), logon restrictions have no effect whatsoever.
Thanks,
Robert Saylor, P.E., MCSE
Traffic Operations Engineer
City of Richardson
(972) 744-4324
| "Erik Brown" <[EMAIL PROTECTED]>
08/14/01 09:23 AM
|
To: "NT System Admin Issues" <[EMAIL PROTECTED]> cc: Subject: RE: audit |
I use it here because the old cleaning crew had a bad habit of trying to
access stuff on users PCs that weren't logged off. It helps to take care of
"memory" problems (people forget to log off...etc). It also keeps people out
while the backups are running.
Erik
-----Original Message-----
From: Shirley Laliberte [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, August 14, 2001 9:04 AM
To: NT System Admin Issues
Subject: audit
Our auditors just wrote us up.
Here's their statement "The credit Union is not utilizing time/day
restrictions in Windows. These setting restrict users from gaining network
access during non-business hours. If not set appropriately, these accounts
can be exploited to gain unauthorized access to the network".
We have not dial up connections to the network. The only thing we have
setup is to allow a connection to the Exchange server for internet email.
We have eight digit passwords and an account is locked out after 3 invalid
attempts.
I don't believe having logon hour restrictions will improve security but I
would like other opinions.
Opinions???
Shirley Laliberte
Quincy Municipal Credit Union
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
