Just been on a course and they drummed this into us "if its not in writing, don't do it".
If you are going to run any network tool, make sure that you have permission in writing from the appropriate person. But aside from that, its true, if you badger them enough they will conform :) Shanna -----Original Message----- From: simsjs [mailto:[EMAIL PROTECTED]] Sent: Wednesday, 19 February 2003 9:05 AM To: ullmic6; security-basics Subject: Re: passwords With this being said, you have to make sure that you will not get in trouble for running this crack on your users, check the security policy and make sure it is clearly stated there whether or not you have this right. If you do not have a security policy, you should create one (these are great for covering your rear). Also notify your manager what you are going to do and show him where the security policy says you have the right to do it. After a few times doing this, you will find that users would rather pick something to get you off their backs than to have to listen to your lecture every few months.