Re: Users sharing passwords

[DrFranken <midrange@xxxxxxxxxxxx>]

State the policy very clearly. Get them to sign that they have received 
and understood said policy. Policy needs to indicate that sharing 
credentials is grounds for immediate dismissal.

Then dismiss the first person caught violating the policy and notify the 
rest of the company the reason for dismissal.

Problem solved.

BUT you also must make it reasonable simple to get them access to what 
they need. If updated access takes two weeks and four signatures then 
you are working against yourself.

        - Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 1/30/2020 11:19 AM, Howie, Bill wrote:
> Hello all,
>
> I've got a question for the group.....we are discovering instances of users on our system who are sharing passwords with each other instead of always using the ones created specifically for them.  I'm thinking this is something that is most likely very common among the companies represented in the group and I was wondering how some of you have handled this situation.  We'd like to somehow catch them in the act if that's possible.  Has anyone endeavored to do this?  All responses are most appreciated.  Thanks!
>
> Bill Howie | Senior ERP Programmer/Analyst Consultant
> The HC Companies | 2450 Edison Blvd, Suite 3, Twinsburg OH 44087
> Direct: 330.487.3739 | Cell: 330.495.5627 | Toll Free: 800.225.7712
>
> The HC Companies, Inc.<http://www.hc-companies.com/> - North America's Leading Provider of Containers for Horticulture
> Dillen | ITML | ProCal | Kord | Amerikan | Planters' Pride
>  From Grower to Gardener, Improving Our World
> [Related image]<https://www.linkedin.com/company/the-hc-companies>  [Related image] <https://www.facebook.com/HCCompanies/>
>
> Disclaimer
>
> The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful.
>
> This email has been scanned for viruses and malware, and may have been automatically archived by Mimecast Ltd, an innovator in Software as a Service (SaaS) for business. Providing a safer and more useful place for your human generated data. Specializing in; Security, archiving and compliance. To find out more visit the Mimecast website.