RE: Client Access bypass signon (Dan Bale)

["Steve Martinson" <SMartinson@xxxxxxxxxxxxx>]

Dan,

So, you've "automated" your signon to the system via a clear-text batch
file.  That doesn't violate your organization's security policy?  Bad
enough that your doing that, but the batch file resides on the network?
That's even worse.  

Is skipping a couple clicks and maybe typing 20 more characters (10 for
profile, 10 for password) worth leaving the keys to YOUR kingdom out
there on the share server?  When I say YOUR kingdom, I'm referring to
the fact that all activity on a system is tied to the user profile, so
whether it's you or someone who snagged your password from your batch
file that's using profile DBALE, the system doesn't differentiate, and
you are forever tied to the actions taken with the profile. 

Best regards,

Steven W. Martinson, CISSP, CISM
Manager of OutLink Security
Jack Henry & Associates, Inc.
7800 Willowchase Blvd.
Houston, TX.  77070
     voice              281.517.8000
     external fax       281.517.8157
     internal ext       471800




NOTICE: This electronic mail message and any files transmitted with it are 
intended exclusively for the individual or entity to which it is addressed. The 
message, together with any attachment, may contain confidential and/or 
privileged information. Any unauthorized review, use, printing, saving, 
copying, disclosure or distribution is strictly prohibited. If you have 
received this message in error, please immediately advise the sender by reply 
email and delete all copies.