Solved

Requirement for dual approval when changing system passwords - Server 2008 R2 domain

Posted on 2012-03-28
2
364 Views
Last Modified: 2012-04-17
We have a new requirement in that any changes to System passwords need to be approved by 2 users. Instead of 1 person with the appropriate permissions being able to change system passwords. Eg the administrator acocunt.

We have a server 2008 R2 domain level.
0
Comment
Question by:Mayogroup
2 Comments
 
LVL 95

Accepted Solution

by:
Lee W, MVP earned 500 total points
ID: 37780242
Never heard of this requirement or ever being able to be considered or done.  Put simply, I'm going to say sorry, but this cannot be done without being able to implement some kind of two factor authentication and each person only has access to one "factor".

I'm curious if anyone else has suggestions, but your answer may simply be that this is not possible.  You might have to implement an audit system whereby you track who changes the password and then that person must retain records as to who authorized the change.
0
 

Author Comment

by:Mayogroup
ID: 37784812
That is what I thought. It was a strange request, but I at least had to check.
0

Featured Post

Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Account Lockouts 25 182
Export all user attributes in Active Directory 2008 R2 4 47
WebSite Direction 1 41
Using Linux to replace Windows Server 2008 R2 for network drives 5 73
To effectively work with Diskpart on a Server Core, it is necessary to write some small batch script's, because you can't execute diskpart in a remote powershell session. To get startet, place the Diskpart batch script's into a share on your loca…
Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question