RE: Security <was RE: Fw: Rewarding challenge AS/400...>

Thank you, this is right out of "Mr. Boffo."  Really improved a less than
optimal day.

> -----Original Message-----
> From: Eric [mailto:Eric@tsoft.com]
> Sent: Tuesday, September 21, 1999 11:06 AM
> To: 'MIDRANGE-L@midrange.com'
> Subject: Security <was RE: Fw: Rewarding challenge AS/400...>
> 
> 
>       Being that many users do not know that they should not 
> be signing on as 
> other people, one option would be to present a screen to 
> users every so 
> often.  State that payroll wants the correct spelling of 
> their name and 
> what department that they are working in.  You could also 
> specify that the 
> name that they fill is not their USER ID.  This tends to weed 
> out some of 
> the culprits.
>       Nothing is full proof though.  At a company that I 
> worked at once, I 
> turned on password expiration in hopes of keeping people from 
> using each 
> other's passwords.  I thought I had it all worked out until 
> one day while I 
> was in the sales department I heard someone yell, "It's time 
> for me to 
> change my password.  Who has the book?".  I asked the person 
> what book they 
> were looking for.  She said that whenever an employee changes their 
> password, their supervisor makes them write their name and 
> new password in 
> a book for employee reference.  They keep by the printer so 
> everyone can 
> access it.
> 
> Eric Kempter
> 
> 
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---