We use http://www.scriptlogic.com/products/serviceexplorer/, great
management tool that allows frequent changes without brain damage.
gb
-----Original Message-----
From: kathy.kirk@prudential.com [mailto:kathy.kirk@prudential.com]
Sent: Thursday, January 05, 2006 4:50 PM
To: security-management@securityfocus.com
Subject: Service Account Pswd Mgt
I've been asked how managing service accounts works in other
organizations.
What is your policy for changing Service Account passwords? Is it based
on
an event (e.g., administrator leaves the company) and or a time
requirement
(e.g., every 90 days). If your organization does change Service Account
passwords, is it consistent across the organization? How do you enforce
your policy?
By Service Account, I'm referring to system IDs used to perform backups,
automate FTPs, run applications, jobs, scripts, etc.
thanks,
kathy
______________________________________________________________________________________
Glen Baker
CIO
t: 212.768.9393 ext 2550
f: 212.768.9414
c: 973.727.8539
477 Madison | Suite 240 | New York, NY 10022
www.opiglobal.com
______________________________________________________________________________________
The information in this email is confidential and may be legally privileged. It
is intended solely for the addressee. Access to this email by anyone else is
unauthorized. If you are not the intended recipient, any disclosure, copying,
distribution or any action taken or omitted to be taken in reliance on it, is
prohibited and may be unlawful. When addressed to our clients any opinions or
advice contained in this email are subject to the terms and conditions
expressed in the governing engagement letter.
