Re: Default Password

["Lopez, Andrew" <alopez@xxxxxxxxxx>]

> message: 10
> date: Wed, 04 Jun 2003 11:42:25 -0400
> from: "Todd Kidwell" <Todd.Kidwell@xxxxxxxxxxxxxxxxxx>
> subject: Re: Default password
> 
> I have a command that the help desk runs whenever they need to reset
> a password.  The command uses adopted authority from the security 
> administrator.  Whenever I have a profile that should not have a 
> password or a password reset, I revoke the security admin's  
> authority to the profile.
> 
> The help desk does not have direct authority to any of the profiles.

We've started using the TAATOOL Assistant Security Officer Menu (SECOFR2).
It allows our I/S staff to set a user's password to either a random value or
to the same as the user profile.  In either case, the password is set to
expired and the user is forced to choose a new password.

With the other options to re-enable an account and vary back on a device,
the menu has been a life-saver when we recently changed our password
settings for QPWDEXPITV, QPWDMINLEN, QPDWPOSDIF, etc.  While the changes
were needed because of new internet connectivity, it would have been a
complete headache without the ability to handle users locking themselves out
of the system in an expeditious manner.....