Re: Why require CTRL+ALT+DEL for XP sigon

[Jeff Crosby <jlcrosby@xxxxxxxxxxxxxxxx>]

SAK?

Swiss Army Knife
Server Appliance Kit
Svenska Afghanistankommittén (Swedish Committee for Afghanistan:
Stockholm, Sweden)
Secure Attention Key
Saif Ali Khan (actor)
South American Khatru (Brazil)
Single Above Knee (amputation)
Stree Aadhar Kendra (women's support center; India)
Spark Arrester Kit
Suomen Ammattiliittojen Keskusjarjesto (Finnish: Central Organization
of Finnish Trade Unions)
Suck A Kumara

Inquiring minds want to know . . .


On Wed, Oct 14, 2009 at 1:34 PM, Lukas Beeler
<lukas.beeler@xxxxxxxxxxxxxxxx> wrote:
> On Wed, Oct 14, 2009 at 19:17, Jeff Crosby <jlcrosby@xxxxxxxxxxxxxxxx> wrote:
> >  That always bugged me a bit, but, as I said, they were behind locked doors.
> > When we set up a domain at that time, autologin went away due to requiring CAD to log in.
>
> I'm not really seeing why you associate the SAK requirement with
> autologin - they're not really related. I believe you can do
> autologon, even with the SAK requirement on.
>
> >  The
> > network consultant is as well, he says he has NEVER set up a non-server PC
> > to do this.
>
> I can perfectly understand the Autologon requirement for Clients in
> some cases, for example in the Point of Sale systems we deploy,
> Autologon is usually enabled to a heavily restricted user which just
> runs the Point of Sale application. And has no access to any important
> data. The PoS application also has it's own user management and screen
> locking mechanisms.
>
> But why would one anyone ever use Autologon on a server?
>
> > What else can I give them as reasons?
>
> Don't reason. Policy is policy. Passwords are required, not optional,
> not open for discussion. There's no way you can ever win such an
> argument, as people that want autologon on their clients are obviously
> out of touch with reality. Thus, an argument based on facts like
> security is going to fall on deaf ears.
>
> --
> Read my blog at http://projectdream.org
> --
> This is the PC Technical Discussion for iSeries Users (PcTech) mailing list
> To post a message email: PcTech@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/pctech
> or email: PcTech-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/pctech.



--
Jeff Crosby
UniPro FoodService/Dilgard
P.O. Box 13369
Ft. Wayne, IN 46868-3369
260-422-7531
www.dilgardfoods.com

The opinions expressed are my own and not necessarily the opinion of
my company.  Unless I say so.