@Carnival-Boy said in SAMIT: Should You Provide Equipment for Work from Home Staff?:

From that, you've drawn a huge number of untrue assumptions, such as I'm not really IT,

Where did I draw that conclusion? I asked you if you were and you've not said one way or the other. That's all. Repeating that you work for an ISV, whatever that means to you, in no way whatsoever answers the question. Just because an ISV is in no way an IT organization doesn't mean that they don't hire some IT staff internally. I feel like you are saying it to try to tell us you're not in IT, but it doesn't imply that.

Just like working at McDonald's includes both flipping burgers and being a CIO.

ISVs tend to have incredibly small IT needs, in general. But they certainly need IT. As someone that's owned an ISV for a very long time, we certainly have IT. But we don't offer IT, we offer software. But developers need IT support too. As do the office staff, etc.

@irj said in ADUC Set Password Expiry:

@gjacobse said in ADUC Set Password Expiry:

@irj said in ADUC Set Password Expiry:

You gotta teach good culture

Good Luck

Sometimes people have to be inconvenienced for security

Don't disagree - but can't stop doing business either.

Managing all these exceptions is an operational nightmare that will create a load of technical debt.

No lie - and no argument there. But resetting the expiry date/time doesn't seem all that different than resetting any password. few clicks and poof.

I can understand your point, but some responsibility for security must fall on the user. Management of course has to buy in on this and/or give full control of IT policies to a CISO/IT manager/generalist (depending on size of business).

Again - no disagreement. Barring this - being able to set a date for the password to expire that isn't to far out of policy seems better and more ideal than some of the options.

Very good points. Thanks all