An anonymous reader writes: My employer wants to log the passwords of all user accounts in the company. I've pointed out that all domain users, including administrators, already have access to my machine should I be out of the office. I've also pointed out the potential security risks of identity impersonation. But my protests are being overruled. Can I be forced to reveal the password for my account?