Solved

Logging into workstations as the user, but without their password

Posted on 2006-06-16
3
237 Views
Last Modified: 2010-03-18
Here's the deal. I work for a small company where we have traditionally kept everyone's password on a list in a lock box. We often have to work on someone's machine when they're not here. We have a Windows 2003 Active Directory Domain w/all Windows XP SP2 workstations.

The concept of resetting a password makes everyone upset, so we keep the same passwords for 6-12 months right now.

I'm now looking at changing this policy to changing passwords every 3 months using the built in password management features of Group Policy.

I really need a way to access someone's computer as them to troubleshoot problems without resetting or knowing their current password. 90% of the problems that my users run into are issues that can only be seen when logging in as them. We rely a lot on the convenience of working on computers when people are out of the office.

Is there a way to go about doing this?

Thanks!
Greg
0
Comment
Question by:gregmoore
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 84

Accepted Solution

by:
oBdA earned 500 total points
ID: 16923385
Nope, sorry. That would undermine any security settings implemented. You either have to reset the user's password, which is an auditable event and will be noticed by the user, or the user will have to tell you his password. Either way, the user is aware that someone was/is/will be impersonating him.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Have you ever set up your wireless router at home or in the office to find that you little pop-up bubble in the bottom right-hand corner of Windows read "IP Conflict - One of more computers on the network have been assigned the following IP address"…
A common practice in small networks is making file sharing easy which works extremely well when intra-network security is not an issue. In essence, everyone, that is "Everyone", is given access to all of the shared files - often the entire C: drive …
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question