3 ms·
At my last job we had the following. 1.Active directory password expires every 60 days 2.Extremely crazy requirements around the AD password 3.Only place you
by apohn 4y ago
At my last job we had the following.
1.Active directory password expires every 60 days
2.Extremely crazy requirements around the AD password
3.Only place you can change password is using the Windows login screen
4.No easy place to lookup the password requirements because the IT Intranet site was a completely mess and Windows login only says "Password doesn't meet requirements"
5.Bitlocker password required on laptop
6.2FA via a PKI card
7.Requirements for Bitlocker, PKI, and AD password were all
different.
8.Extremely convoluted process to reset your password, usually resulting in a call to the IT help line
This is the only job in my life where I ended up writing down my passwords on paper because my passwords were always some crazy nonsense I couldn't remember. I know I wasn't the only one as I saw people with post-its on there laptop with their passwords.
This was a large software company. The whole process was just stupid. If you have a terrible process people will have no choice but to find a way to work around it.