RE: Need to generate passwords

["Chuck Lewis" <clewis@xxxxxxxxxx>]

Amen Mark !

I started compose that EXACT reply and got sidetracked.

What we did where I was at before, was that HR required Mother's Maiden Name
so we had that in a file. We set the new users password to that and *EXPIRED
with the program that created the user profile.

What was REALLY nice about this was I also wrote a password "reset" program
and the Help Desk folks could run it (it did all kinds of logging and alerts
on too many uses, etc.) and just tell the user "OK, it was reset to your
mother's maiden name" and no one knew what that was except the end user.

This came up because we were a union shop and there was concern giving the
supervisor of a new user, the user id and password even if it DID get
changed right away.

Chuck

-----Original Message-----
Mark Lazarus
Sent: Wednesday, October 23, 2002 1:56 PM
To: midrange-l@midrange.com
Subject: Re: Need to generate passwords


  Have you explained that random passwords are *far* more likely to be put
on a Post-It on the side of the screen??

  -mark