Re: QPWDLVL 4, new with IBM i 7.5

I agree with you wholeheartedly about the shared admin password being a
no-no. Especially when the users using this have the same authority in
their day-to-day password. I see no need for it. They are just in the
habit of, if they are signing into a computer other than their own, they
use that admin account.

On Mon, Feb 19, 2024 at 9:11 AM Patrik Schindler <poc@xxxxxxxxxx> wrote:

Hello Rob,

Am 19.02.2024 um 14:33 schrieb Rob Berendt <robertowenberendt@xxxxxxxxx>:

One problem I've seen with NOT requiring a password change is that

eventually people become paralyzed with fear of the ramifications of
changing their password.

This is an interesting remark. Never heard of this before. I guess from a
user's point of view, this shouldn't be much different compared to changing
his Windows Active Directory password?

One prime example is a shared Windows administrator account at one

company I know of.

This isn't a pure "user" case, but a combination of bad practice (shared
account) and lack of process documentation (who/what uses this account).
For this case, I agree with you and would force a change. Yes, things can
be disrupted by that but that's the price to pay for accumulating technical
debt over time. :-)

Even though they've had turnover and some of the people who knew it have

long been gone.


And that is the main point against using shared accounts with passwords.
Admins often know a way in. And when they have been treated badly by the
former employer, some of them seek revenge. It's really interesting how
blue-eyed some managers just hope there will be no wrongdoing. 🙈🙉🙊

:wq! PoC

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.