@jaredbusch does digital ocean block this by default as well?

@dustinb3403 I agree with this, I've seen one type of HR software copying data from one program to another using plain text files, might as well not of even had passwords on the software login screen.

I've got a client that I've warned, that has POS program that writes data to an access backend database with the access database fully open... I stated to him as well, might as well not have a login screen for the POS software. I've emailed his software developer and asked him to sort this out.

This steps into the Devops kind of arena I personally think though.

@carnival-boy Only if you have some kind of password policy automation in place, like Scott has stated, using tools like puppet.

@carnival-boy said in GDPR Requiring Centralized Password Management:

@dustinb3403 said in GDPR Requiring Centralized Password Management:

@carnival-boy said in GDPR Requiring Centralized Password Management:

I don't understand what user/password management has to do with GDPR. My understanding of GDPR is that relates to restrictions on personal data held by companies, and rules on reporting data breaches to authorities in a timely manner. Neither of these seem to relate to AD or similar services? AD doesn't even generally hold personal data.

First and Last name of a person is personal data. But so is an email address, birthday, sex, sexual orientation etc.

Don't store sexual orientation in AD. Have processes to remove accounts for ex-employees in a timely manner. Job done.

storing sexual orientation in AD would be a bit weird lol...

@carnival-boy This is what I'm stating, using AD for GDPR compliance

@scottalanmiller Most consultants I work with don't know how to use automation tools like puppet, ansible etc.
I agree if you have an RMM tool, this could possibly work.

@carnival-boy The basis of it is regarding personal data, but the outer layer is prevention, how are you protecting this personal data.

@scottalanmiller Could you give me an example of how you would change the local admin password on each machine if this password was compromised? or if a new person has started as needs to use multiple machines? are you going to go round to each machine and create this local account?

How passwords are stored and reset is a critical aspect of GDPR compliance. Clients and staff members may legitimately forget or need to reset passwords for a number of reasons. GDPR requirements mean that companies must be able to demonstrate that their password reset processes and procedures are secure. Systems must be in place, for example, to prevent help desk employees that may be involved in resets from directly accessing passwords.

With GDPR centralised password management is now required, so AD could me more prevalent then a Workgroup in the UK now.

@scottalanmiller use real coffee beans I take it Scott?

Got format issue on mobile:

@black3dynamite said in What Are You Doing Right Now:

Deploying chocolatey packages via ansible playbook to several interview room computers. Very cool.

This does sound smart, would like to get stuck in to learning these one day....

@scottalanmiller haha 100% agree

Loved using DOS, but now prefer using bash rather then powershell.. I just don't get why every command is like writing a sentence in powershell.

https://www.icann.org/resources/pages/ksk-rollover

The days when a Yahoo account was relevant, I started creating a site with Geocities and talked to random people on ICQ lol...

I got dialup when the first company in the UK called freeserve offered a fixed monthly cost rather than per minute billing..

How slow site loading was back in them days lol...

@scottalanmiller I agree, this is where Linux shines now....I'd would love to see developers drop windows and push their products to Linux, we only need some big companys like Adobe to adopt this which would push everyone else over..

Latest feature release 1809 has been pulled:

https://www.google.co.uk/amp/s/techcrunch.com/2018/10/06/microsoft-suspends-windows-10-update-citing-data-loss-reports/amp/

I'd say the old service pack method was more reliable then this windows as a service crap.