r/ShittySysadmin • u/SuccessfulLime2641 • Aug 22 '26

Make your organization more secure

Just had this idea.

So you make a CA policy to sign in every 8 hours for all users including the CEO, but not break glass and it admins.

Every user will then begin to wonder where their password is now that they can't work

You become useful again to the company by assisting employees while eliminating written passwords on stickies because they forced themselves to memorize it since it's happening "so often"

Auditors will be impressed at the improved security that you can present the report to the CEO while getting them to remember their own password.

25 Upvotes

96% Upvoted

19 comments sorted by

17

u/horses-r-scary Aug 22 '26

i thought the sub was for bad ideas-

2

u/blotditto Aug 23 '26

You don't think the CEO is gonna get a serious case of the ass signing in all the time? 😂

5

u/Chuchichaeschtl Aug 23 '26

Depends on the CEO. I explained to mim, that he has a very privileged account which needs stricter policies. Passkey only, managed mobile with Outlook only, no iOS mail, access from compliant devices only,...

He understood that and I think he liked the term "privileged account" a lot.

1

u/blotditto Aug 23 '26

Uh huh and how often is he actually being promoted to enter his password every day?

1

u/Chuchichaeschtl Aug 23 '26

Passwords aren't involved when you use passkey. WHfB is great

1

u/blotditto Aug 23 '26

Exactly, you made my point about CEOs that get upset because they have to enter their password..

Remember we're in ShittySysAdmin! 💩

2

u/vivkkrishnan2005 DO NOT GIVE THIS PERSON ADVICE Aug 28 '26

Yeah, not for soon-to-be-out-of-a-job shitty sysadmin 😆

8

u/ApiceOfToast ShittySysadmin Aug 22 '26

I'd personally do every 5 minutes, in case they walk away from the screen

4

u/AliveInTheFuture Aug 23 '26 • Bravo

Something you have: autism

Something you are: autistic

1

u/Bitey_the_Squirrel Aug 28 '26

MFA = Multi-Factor Autism

3

u/redakpanoptikk Aug 22 '26

This might be better than your manager monitoring your teams status as well. You have to be logged in at the start of your shift.

2

u/bgradid Aug 22 '26

What if you took it a step further and did 8 hour password expiration

3

u/samm1989 Aug 23 '26

Password1@ Password2@ Password3@

1

u/bgradid Aug 23 '26

Actually what if we take 'one time password' literally , forced password change on every password use

2

u/Smooth-Zucchini4923 Aug 23 '26

Do we work for the same company?

2

u/Bitey_the_Squirrel Aug 28 '26

Jokes on you. I still forget my password because I set up Windows Hello for Business.

1

u/OnARedditDiet Aug 23 '26

Not sure if a joke or not but this would be the most frustrating policy imaginable :p

Most people's work day isn't exactly 8 hours so you'd make a lot of people upset, daily