[SunRescue] users

Mon Mar 5 15:49:04 CST 2001

<html><DIV>
<P><BR>Thanks Men</P>
<P> </P>
<P><BR> </P></DIV>
<DIV></DIV>
<DIV></DIV>>From: Gil Young <GJYOUNG at CFL.RR.COM>
<DIV></DIV>>Reply-To: rescue at sunhelp.org 
<DIV></DIV>>To: rescue at sunhelp.org 
<DIV></DIV>>Subject: Re: [SunRescue] users 
<DIV></DIV>>Date: Mon, 05 Mar 2001 09:17:57 -0500 
<DIV></DIV>> 
<DIV></DIV>> 
<DIV></DIV>>Wally, if this is a purely internal system, the best way is to get a 
<DIV></DIV>>list 
<DIV></DIV>>of employees from HR, and delete all non-employee accounts. If 
<DIV></DIV>>there are 
<DIV></DIV>>people on the system that are not employees, you will find out about 
<DIV></DIV>>them 
<DIV></DIV>>when they come running to you (this may include consultants, but 
<DIV></DIV>>hey, you 
<DIV></DIV>>have to start somewhere). This will give you a great baseline to 
<DIV></DIV>>start 
<DIV></DIV>>working against. 
<DIV></DIV>> 
<DIV></DIV>>This could be taken as BOFH'ish, but if you are unsure of the 
<DIV></DIV>>accounts, 
<DIV></DIV>>they really do need to be cleaned out and re-requests made. Let 
<DIV></DIV>>them know 
<DIV></DIV>>it is a security audit of the system and thank them for their 
<DIV></DIV>>understanding. Immediately establish account request forms and 
<DIV></DIV>>track all 
<DIV></DIV>>requests for accounts from that point on. On the form, get as much 
<DIV></DIV>>info as 
<DIV></DIV>>possible (name, date location of person, term of account (i'd make 
<DIV></DIV>>it 
<DIV></DIV>>yearly), purpose of account, etc..) 
<DIV></DIV>> 
<DIV></DIV>>If you are nervous about deletions, do not delete the questionable 
<DIV></DIV>>accounts, but deactivate them (put a # in front of the password hash 
<DIV></DIV>>for 
<DIV></DIV>>each account). Then hold them deactivated for 30 days, if no-one 
<DIV></DIV>>complains, then delete them. 
<DIV></DIV>> 
<DIV></DIV>>Best Wishes! 
<DIV></DIV>> 
<DIV></DIV>>Gil 
<DIV></DIV>> 
<DIV></DIV>>At 01:52 PM 3/5/01 +0000, you wrote: 
<DIV></DIV>>>Hello Admin, 
<DIV></DIV>>> How do I find out users who have not access the 
<DIV></DIV>>>system 
<DIV></DIV>>>in three months. Some users have left the company and I am trying 
<DIV></DIV>>>to 
<DIV></DIV>>>delete their account. 
<DIV></DIV>>>Please help. 
<DIV></DIV>>>wally 
<DIV></DIV>>> 
<DIV></DIV>>> 
<DIV></DIV>>>---------- 
<DIV></DIV>>>Get your FREE download of MSN Explorer at 
<DIV></DIV>>>http://explorer.msn.com 
<DIV></DIV>>>_______________________________________________ Rescue maillist - 
<DIV></DIV>>>Rescue at sunhelp.org http://www.sunhelp.org/mailman/listinfo/rescue 
<DIV></DIV>> 
<DIV></DIV>>Gil Young 
<DIV></DIV>>KG4KVX 
<DIV></DIV>> 
<DIV></DIV>>_______________________________________________ 
<DIV></DIV>>Rescue maillist - Rescue at sunhelp.org 
<DIV></DIV>>http://www.sunhelp.org/mailman/listinfo/rescue 
<DIV></DIV><br clear=all><hr>Get your FREE download of MSN Explorer at <a href="http://explorer.msn.com">http://explorer.msn.com</a><br></p></html>