RE: password policy and system rules

Don't forget the "boss" who instead of doing the proper procedures to
delegate electronic forms approval just tells the secretary his/her
password. Then that secretary who is off for a day tells her backup that
password and that secretary writes it down on one of the boss's business
cards so she knows who it goes with. 

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of rob@xxxxxxxxx
Sent: Thursday, March 08, 2007 9:55 AM
To: Midrange Systems Technical Discussion
Subject: Re: password policy and system rules

In our case it would be, "Hey - I had an accident with my table saw this

weekend.  Can you log in for me?"

<snip>
Adam said
3. People don't think about security too much.
"Hey - I forgot my password.  Can you log in for me?"  You'd be shocked 
how many people will do this.
</snip>

Rob Berendt