The new forums will be named Coin Return (based on the most recent vote)! You can check on the status and timeline of the transition to the new forums here.
The Guiding Principles and New Rules document is now in effect.
Smart card keyboards? (and implementation thereof)
GrimReaper
Registered User regular
Registered User regular
I'm currently playing with the idea of adding some better security at work.
Has anyone used/set-up a bunch of computers using these type of keyboards? What are your experiences?
For example this HP keyboard.
Do the smart cards allow for multiple users? If I allow it for example can user 1 log in to user 2's computer as user 2 or will it limit it that when user 1 uses their smart card at user 2's computer it will log them in as user 1 without any prompt? (it's a whole people want to check others emails when out of the office for a few hours thing)
I'd like it so that a smart card will allow a user to log in as more than just one user. Or am I buggered in that regard? (like for example a universal smart card that could login as any user for myself as admin, then smart cards that allow say 4 people to login as each other and so on)
Has anyone used/set-up a bunch of computers using these type of keyboards? What are your experiences?
For example this HP keyboard.
Do the smart cards allow for multiple users? If I allow it for example can user 1 log in to user 2's computer as user 2 or will it limit it that when user 1 uses their smart card at user 2's computer it will log them in as user 1 without any prompt? (it's a whole people want to check others emails when out of the office for a few hours thing)
I'd like it so that a smart card will allow a user to log in as more than just one user. Or am I buggered in that regard? (like for example a universal smart card that could login as any user for myself as admin, then smart cards that allow say 4 people to login as each other and so on)
GrimReaper on
0
Posts
That covers the different accounts/permissions, etc ... but this whole "User 1 has a card that logs in as User 2" stuff just looks like a clusterfuck of SOX violations to me.
Can trade TF2 items or whatever else you're interested in. PM me.
the cards ive had experience with are imprinted with your login information and email information making it possible for people to log on to different computers with their cards but having to set up the mail server and have no personal files. you can have an admin card that logs you into the admin account to all the computers you want to have access to and have everyone else have access to only their account and not the admin (you can give them admin privledges if you want though). you might be able to set up more than one email information per card but i have no clue how you would do it.
it really doesnt add much security btw since people will try to leave their computer logged in all the time regardless and it adds problems where people cant get onto their computer to work since the reader is broken which happens alot.
At the moment I'm only checking stuff out, not yet purchasing. I've got a bunch of more important projects to sort out like poe external security cameras and so on.
Currently the password policy for users is a bit of a joke (inherited from my predecessor), so I'm looking at having random character passwords and/or an implementation of smart cards.
---
I've got a spare copy of Portal, if anyone wants it message me.
I'd just start with a strong-password policy - trying to push them into smartcards, PINs, and multiple accounts seems like a problem waiting to happen.
Can trade TF2 items or whatever else you're interested in. PM me.
log people out after 30 minutes of non-use.
make people have atleast 2 numbers and 2 capital letters in their password minimum 8 characters.
the cards are really more of a pain than they are usefull.
Businesses spend $Texas to ensure the safety of their data; setting a policy that will cause more of it to be lost is just moronic.
GPO-enforced screensaver on a 10-minute timer, password required to unlock.
Can trade TF2 items or whatever else you're interested in. PM me.
sorry i didnt mean log out i meant lock, im trying to follow too many threads at once
For example guys who come in on a weekend or night shifts from walking into the office and doing something they shouldn't. By giving a user a physical item which allows them to log in to a computer and perhaps disabling password login then those guys won't be able to do anything on the computers. (at least without being fairly knowledgeable with boot cd's)
---
I've got a spare copy of Portal, if anyone wants it message me.
so you are trying to prevent workers coming in and doing work on off hours?
or someone else coming in and logging on that shouldnt be?
cause the second should be taken care of by passwords and the first just seems odd.
You could just disable logins outside working hours - but smartcard or not, physical access always trumps everything.
Can trade TF2 items or whatever else you're interested in. PM me.
How much experience with CCTV do you have? And what software/cameras are you looking at?