Setting password protected screen savers also helps security in case someone
goes home a long time before the hours restriction comes into
effect.......all these little things add up to a big improvement
-----Original Message-----
From: Roger Seielstad [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, 14 August 2001 16:04
To: NT System Admin Issues
Subject: RE: audit
It does improve security to a point. It keeps the cleaning crew from trying
to hack into your machines while everyone else has gone home, for instance.
It certainly helps with weak passwords.
------------------------------------------------------
Roger D. Seielstad - MCSE MCT
Senior Network Administrator
Peregrine Systems
Atlanta, GA
http://www.peregrine.com
> -----Original Message-----
> From: Shirley Laliberte [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, August 14, 2001 10:04 AM
> To: NT System Admin Issues
> Subject: audit
>
>
> Our auditors just wrote us up.
> Here's their statement "The credit Union is not utilizing
> time/day restrictions in Windows. These setting restrict
> users from gaining network access during non-business hours.
> If not set appropriately, these accounts can be exploited to
> gain unauthorized access to the network".
>
> We have not dial up connections to the network. The only
> thing we have setup is to allow a connection to the Exchange
> server for internet email. We have eight digit passwords and
> an account is locked out after 3 invalid attempts.
>
> I don't believe having logon hour restrictions will improve
> security but I would like other opinions.
>
> Opinions???
>
> Shirley Laliberte
> Quincy Municipal Credit Union
>
>
>
>
> http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
>
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm
http://www.sunbelt-software.com/ntsysadmin_list_charter.htm