[news.sysadmin] Policies on Password changes

jjc@unix.cis.pitt.edu (Jeffrey J. Carpenter) (06/04/91)

Hi,

We are reviewing our Computer Center's policy on password changes, and I
would like to see how other University Computer Centers handle password
changes.

Please answer the following questions (or as many as you have
information for) and return them to me, I will post a summary message to
the list.


1. Do people needing to have their password go to a central site (like
an Accounts Office) to get their password changed or can they go to any
computing lab?

2. Do you reset the password to the original password or do you set it
to something else (what the user requests, what you assign, etc...)?

3. Do you permit password changes over the phone?  If so how do you
verify that the user is who he says he is?

4. Who is authorized to change passwords (Full time employees, part-time
employees, accounts office people, lab operators, user consultants,
etc...)?

5. Please list any other comments not covered by the questions above.



Thanks for your help.


	jeff


------
Jeff Carpenter, University of Pittsburgh, Computing and Information Services
600 Epsilon Drive, Pittsburgh, PA 15238
jjc+@cis.pitt.edu, jjc@pittvms.bitnet, +1 412 624 6424, FAX +1 412 624 6436