Solved

Does anyone have suggestions on verifying identification for password reset requests

Posted on 2009-05-19
3
192 Views
Last Modified: 2013-12-04
Suggestions on verifying staff identification for remote requests for A.D and appliation password resets
0
Comment
Question by:LPSHelpdesk
  • 2
3 Comments
 
LVL 6

Expert Comment

by:drewha1969
ID: 24422390
Have them send it by signed email?

Assign them a PIN?
0
 
LVL 6

Accepted Solution

by:
astralcomputing earned 500 total points
ID: 24428174
Challenge response. But this implies they know something only they and helpdesk knows. Like a hire date.
0
 
LVL 6

Expert Comment

by:drewha1969
ID: 24453229
This topic is interesting, so I am not arguing the answer but arent PINs and Challenge responses basically the same thing?  They are both random answers to verify identity.

Plus, if you choose a question that is harder for a random person to find out other than the usual (like birth date, maiden name, etc) it will be just as easy to forget as a PIN.

You could have the employee create their own question, but wouldnt you need a system that allows for the random question to be stored?

So, I think either of those suggestions are probably the least secure, although every bank, cell phone, email company uses these questions...
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

The term "Bad USB" is a buzz word that is usually used when talking about attacks on computer systems that involve USB devices. In this article, I will show what possibilities modern windows systems (win8.x and win10) offer to fight these attacks wi…
OfficeMate Freezes on login or does not load after login credentials are input.
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now