Posts made by DarienA

@Dashrender said in Password manager for ordinary users?:

@DarienA said in Password manager for ordinary users?:

@Kelly said in Password manager for ordinary users?:

Why not just use Firefox? They have a dedicated password manager now, and it is higher quality than the password storage features in Chrome and the like.

For me the answer is centralized policy control. There are a variety of tweaks I can make to LastPass users usage. Forcing master password changes, forcing 2FA, having a master account to force resets for users who fail password recovery, limiting access, etc.

So this is for business users??

The Enterprise version is a multi-user business version yes. They offer LastPass in a variety of different flavors for personal and business use.

@Kelly said in Password manager for ordinary users?:

Why not just use Firefox? They have a dedicated password manager now, and it is higher quality than the password storage features in Chrome and the like.

For me the answer is centralized policy control. There are a variety of tweaks I can make to LastPass users usage. Forcing master password changes, forcing 2FA, having a master account to force resets for users who fail password recovery, limiting access, etc.

Been a personal/family account last pass user for users, last year brought the enterprise version into the IT dept here at my org. I've been pushing to also get us to pay for accounts for all of our users since we ask them to remember multiple credentials. I think that'll happen later this year so happy about that.

@scottalanmiller said in DuoLingo Challenge:

I've earned two crowns so far while on a conference call today.

Ugh If I have just one more conf call today...

@jt1001001 said in going with 3rd party Dell support vs Dell ProSupport?:

We used Park Place for years without issue and only switched because Reliant gave us better pricing that Park Place could not match. We were happy with Park Place and so far have been happy with Reliant. Our extended coverages come up again in March so we will do the head-to-head battle again and see who comes out better.

This is good to know as we'll have some back end equip that will go EOL so I'll at least feel more comfortable about reaching out to both orgs.

Sorry I didn't mean to leave the conversation hanging like that. Its definitely been a few years but I had heard less than positive things about the organization in terms of communication (how quickly support issues were addressed). Since its been a few years there is absolutely a high chance this was a personnel type situation that has long since been resolved.

Interesting I hadn't heard good things about park place before and they have reached out to me over the years I'll have to keep this in mind.

Trying to get a sense of the timing involved in converting an Azure VM using unmanaged disks to manage disks.

As a test I converted one small vm that just had an OS disk and that took about 10 to 20 minutes. The VM was down during the entire process.

We have some much larger machines with multiple 1TB secondary disks and I'm wondering just how much the time scales up, if all the disks are converted at the same time or done one at a time.

Anyone have any experience with the process?

@Dashrender said in Deploying a password manager product to an entire company?:

I have started a slow rollout of this at my company. it's not going very well for multiple reasons.

1. my boss doesn't trust having all of her passwords in a password manager - she thinks it will be hacked
2. my physicians don't use the same device all the time, they move constantly. Plus they won't even log out of the EHR when they leave an area, why would they bother to log out of LP?
   3)My fraking EHR does it's password changes in a popup window that LP can't see into, so LP's password change mechanism doesn't work forcing users to change it manually, then updating the vault manually.
3. Our timeclock provider (web based) requires there pieces of information when logging in (username, password, last 4 of SSN) - LP has a very hard time reading the field names correctly and thus storing the password and SSN correctly. It normally takes me 15 mins to get that working for users (deleting the vault entry, manually updating specific fields, sometimes deleting fields and readding them, etc)
   5)LP won't fillout passwords for sites/applications inside a Citrix session
4. Not sure this is an issue anymore, but LP being installed into the browser had an adverse affect on performance in one area of our EHR, removing it and the timeout issue was gone. Found no way to tell LP to ignore the page, yet still allow LP to be used for the EHR main logon. (and not sure there was a way to completely disengage LP on any given site at all)

Now perhaps a different password manager would get around most or all of these problems.. but I haven't had time to look into it. Of course, a different password manager won't solve 1 or 2.

I feel your struggle. At least for 1 LP offers some nice plan english security descriptions of their service and for 2 you can force only be logged onto one device at a time as rule (I think there's a timeout setting as well).

@DustinB3403 said in Deploying a password manager product to an entire company?:

@DarienA said in Deploying a password manager product to an entire company?:

@DustinB3403 said in Deploying a password manager product to an entire company?:

@DarienA said in Deploying a password manager product to an entire company?:

@DustinB3403 said in Deploying a password manager product to an entire company?:

@DarienA Yes and no. We have, but not every employee has a need for it. We use LastPass, simple effective and free for 90% of our users.

Are you saying you that you have your users setup their own free accounts or that you are using say the enterprise version and the cost is absorbed by your company for all the user accounts?

We have the bulk setup their own free account using their business email address, then we invite them into whatever shared folders they need access too.

By utilizing the free version though you lose the ability to force certain requirements and rules by policy though since each free account is technically unmanaged correct? I've found many of those policies to be very helpful.

Correct, but the users who use the free accounts, aren't creating credentials in our environment. They are just accessing services we provide and need a quick and simple way to login without needing to know the username or password.

Understood.

@DustinB3403 said in Deploying a password manager product to an entire company?:

@DarienA said in Deploying a password manager product to an entire company?:

@DustinB3403 said in Deploying a password manager product to an entire company?:

@DarienA Yes and no. We have, but not every employee has a need for it. We use LastPass, simple effective and free for 90% of our users.

Are you saying you that you have your users setup their own free accounts or that you are using say the enterprise version and the cost is absorbed by your company for all the user accounts?

We have the bulk setup their own free account using their business email address, then we invite them into whatever shared folders they need access too.

By utilizing the free version though you lose the ability to force certain requirements and rules by policy though since each free account is technically unmanaged correct? I've found many of those policies to be very helpful.

@DustinB3403 said in Deploying a password manager product to an entire company?:

It goes about as smooth as you'd expect, just setup your recovery methods and provide an overarching training on how to use whatever tool you are rolling out.

It'll be lastpass I've used it personally for years and we rolled out the Enterprise version to some of the IT folks a bit back.

@DustinB3403 said in Deploying a password manager product to an entire company?:

@DarienA Yes and no. We have, but not every employee has a need for it. We use LastPass, simple effective and free for 90% of our users.

Are you saying you that you have your users setup their own free accounts or that you are using say the enterprise version and the cost is absorbed by your company for all the user accounts?

I'm thinking about suggesting that we deploy the password manager product that some of the IT teams use to the entire company.

My reasoning is that we beat on employees to create complex passwords and then give them multiple services they need to access onprem, web, etc. and not all of those services support SSO so you have separate accounts.

So we give them this security requirement but then we don't give them anything to support them.

Has anyone here deployed a Password Manager company-wide? Curious to know how that went.

@scottalanmiller said in Have computers gotten boring, or is it just me?:

@IRJ said in Have computers gotten boring, or is it just me?:

I will also say that I am more happy using a stable linux distro vs trying every stupid variation of linux under the sun. It is a huge waste of time. Just give me something that works and works well and is supported. So I can actually USE my system and not tinker.

I agree. I hate tinkering. I'm here to use these tools to get work done. Not here to fiddle with the tools.

^This... All of this.

You're right, apologies:

https://www.mangoapps.com/solutions/intranet

Anyone familiar with Mango Intranet? Want to look at a few different options...

We're in a similar boat, as non O365 users we're looking for a low-cost easy to manage community intranet... host photos from events, post some useful docs for various departments(HR, etc.), useful urls for folks, have a centralized place for non emergency announcements...

You mean all the gobbling up of disparent phone companies wasn't good for them?

ManageEngine Desktop Central for patching, remote support, software install(including Win 10 upgrades or feature pack deployments), inventory. Pulseway and a site call r-u-on for server based monitoring, alerting. RUON strictly alerting, Pulseway is more interactive which includes monitoring allows some server manipulation (services, restarts, files, processes, basic AD account changes). Zendesk for ticketing as we have multiple departments who needed a ticketing service (pricey imo but no one higher up has complained over the years so). Just the tip of the toolbox iceberg here...