Boss wants my password 2008-07-09 05:01 X - first letter to stay somewhat anonymous
Submitted
by
X - first letter to stay somewhat anonymous
on Wednesday July 09, @05:01AM
X - first letter to stay somewhat anonymous writes "Hello all...
We have a small network here at work which consists of a Windows Server 2003 Domain server, and several clients. Some clients have XP Professional or Vista Corp and thus are domain clients. Other clients are either XP home or Vista Home Premium, or are laptops that run off-site and thus aren't domainclients, but just access the network shares on the server.
The domain clients are set up such that their documents and desktop are being stored on the server, for backup reasons, so everytime we log off, docs and desktop will be synchronised. My system is one of these.
Now my boss comes to me that we need to hand over our passwords to our accounts, 'just in case'.
Besides that all significant data is on the server, and the administrator account can access the C-drive, and that my useraccount pass can be reset on the domain server, the only thing that's uniquely on my account, are the passwords stored in my browser for my personal email and some forums.
I have no personal data on this computer besides that.
Even though they can allready access everything should they need to, and hell, if you have physical access to a system, you can get into the system anyway, what additional purpose would the password serve?
The only reason I can figure is to have access to my system whenever they feel like it, without notifying me, because should they reset the password through the domain server, I'd definately know, and should they access the system through the administrator account, they can't access my private email.
What would you do? I don't know the legal situation around all this. I'm in the Netherlands and we have a couple of half-decent privacy laws, but I'm not a lawyer, and know little of all that. All I know is that I'm thoroughly pissed off about it.
They state that the password will be treated confidential and stored in a closed envelope, only to be opened in case of an accident or in agreement with me, and to be honest, I kinda do trust my boss, but I still don't feel good about this.
I currently listed my private password (having the Dvorak layout) to UgjtFrg even though the password actually is different. Hoping they notice the letter locations to 2 words on Qwerty when they (try to) use it.
Any ideas?"
We have a small network here at work which consists of a Windows Server 2003 Domain server, and several clients. Some clients have XP Professional or Vista Corp and thus are domain clients. Other clients are either XP home or Vista Home Premium, or are laptops that run off-site and thus aren't domainclients, but just access the network shares on the server.
The domain clients are set up such that their documents and desktop are being stored on the server, for backup reasons, so everytime we log off, docs and desktop will be synchronised. My system is one of these.
Now my boss comes to me that we need to hand over our passwords to our accounts, 'just in case'.
Besides that all significant data is on the server, and the administrator account can access the C-drive, and that my useraccount pass can be reset on the domain server, the only thing that's uniquely on my account, are the passwords stored in my browser for my personal email and some forums.
I have no personal data on this computer besides that.
Even though they can allready access everything should they need to, and hell, if you have physical access to a system, you can get into the system anyway, what additional purpose would the password serve?
The only reason I can figure is to have access to my system whenever they feel like it, without notifying me, because should they reset the password through the domain server, I'd definately know, and should they access the system through the administrator account, they can't access my private email.
What would you do? I don't know the legal situation around all this. I'm in the Netherlands and we have a couple of half-decent privacy laws, but I'm not a lawyer, and know little of all that. All I know is that I'm thoroughly pissed off about it.
They state that the password will be treated confidential and stored in a closed envelope, only to be opened in case of an accident or in agreement with me, and to be honest, I kinda do trust my boss, but I still don't feel good about this.
I currently listed my private password (having the Dvorak layout) to UgjtFrg even though the password actually is different. Hoping they notice the letter locations to 2 words on Qwerty when they (try to) use it.
Any ideas?"

