My IT department insists on me emailing them my password

If this is how you are supporting your users then your infrastructure sucks. Bad. All of this can be very easily centrally managed.

 

Again, the point isn't that they need his password. The point is they are asking him to email it to them. This violates everything we are taught regarding corporate security as well as individual security. I strongly suspect that if he works for a company that has a security policy in place, that this violates that security policy.

 

This is bull**** and if one of my technicians/admins worked like this they would be looking for another job.

Most of you guys sound like amateurs that have no idea about enterprise computing and security.

 

Any IT department that pulls this kind of crap isn't worth their weight in elephant poo.......

 

Yes I think that was one of his concerns in the first place. Ethical hacking is becoming bigger and bigger. Companies will pay consulting companies to hack into their own company to identify security holes.

 

One time it took three weeks to get my IT to upload some pictures I took into and event folder on Picasa. The first thing the guy did was download images off of Picasa and put them into the folder of images I had made for him to upload. Then he asked me for my password to my Picasa account. I said there had to be a better way or that I could log into his computer, let him do the two second thing, and then log me out. Then he asked if I could create a user profile and password for him. I said no that would be confusing for the group to get pictures from some guy they didn't know.

Finally I just created a dummy account for him to use under my name and used a password I will never use elsewhere. It was odd.

 

My buddy's boss insists on having access to his email when he goes on vacation. In case something important comes up. He always agrees to it.

I can't imagine agreeing to something like that. And this is a Fortune 100 company, not some mom and pop storage lot.

 

lol has he never heard of out-of-office auto-reply?

Crazy.

To the OP - just send him back this pic:

 

I just have a automated email vacation responder that tells folks who to contact if it can't wait until I get back. Fortunately, my boss would never want my email forwarded directly to him.

 

Totally. I'm reading this as an IT manager and thinking to myself... I'd fire all these ****ers.

 

Yeah, we have out-of-office replies too and we use them. Still doesn't matter. I ask him why he lets her do it and he just rolls his eyes.

When he's out of town, she will come to his desk and check it 3 or 4 times a day. I used to work on the same floor and would see her. She will even reply to them in some cases. He once asked her why he couldn't just have it forwarded to her and she said she likes to get out of her office.

My buddy and I often joke that our workplace would make for a great sitcom.

 

Exactly how it should be done. They let you know they need to work on your stuff. They will change the password (like you said it shows they are the actual admin and not social engineering you), you get the password so you can continue working, and then you change it later when they're done. They don't get to know that your last 5 passwords has just been P@ssword12345 and your next one will likely be P@ssword123456. lol

 

Exchange has built in delegation functionality and it is really easy to set up. Then whomever you designate, with whatever permissions that you provide, can manage your email and calendar. This is what many admin assistants use for the people that they manage. Using this functionality also allows there to be auditing as to who is doing what.

A quick google search gives us this:

http://office.microsoft.com/en-us/o...anage-your-mail-and-calendar-HA010075081.aspx

The kind of behavior that you describe is ridiculous and should not be tolerated.

 

does she print them out to read them????

not only is the auto reply not good enough, they cannot forward to her, but she can only check from his machine????

 

I know it sounds unbelievable, but it's true. Seriously.

I would start another thread if I wasn't posting from work right now.

 

I would tell the fool that I needed the root password so I could send him an encrypted email with my real password.

 

Kidding!

 

Why couldn't you just upload the pictures yourself. You're talking about a Google product here. It's not a business application why should your IT have to do this?

 

Not uncommon for small companys. I contstantly ask ppl to email me their passwords for PC setups.

Its a really easy solution...call and give them your password through phone. problem solved. and after your computer is setup, reset your pw. Mountains out of molehills?