Giving out admin details
-
Hi All
Q: what would you do?
We have a client who want to install software (a number of them) for testing on a computer but cant because they dont know the admin password which we need to make changes. (UAC)
I have explained we dont give this out as policy due to security vulnerabilities and of course to prevent users making changes we dont necessarily want them to etc. We advised that we would happily install any apps they want if they give us the list and we'd roll them out.
Then then came back to say they understand but can we not create another local admin user for them to use....
Now - this is besides the point and makes no sense as allows them to do something we dont want to do!What would you do?
-
Can you create local admin accounts for them only on the computer they want to test it on?
-
If the client is paying you to support and do as they ask, do as they ask. Simply make sure that the client who is asking for this has the authority to ask this of you.
Otherwise, simply do as they ask. Don't compromise the admin credentials you use for the site, but go ahead and create the account they've asked for.
-
Pretty much, if the customer demands it you have to do it. But you can have fees associated with supporting boxes that they might be messing with.
-
@Joel get over it and give them what they want, it is their system not yours.
Make sure it is a different account so that they cannot do something and then claim you did it.
But that’s it.
-
@scottalanmiller said in Giving out admin details:
Pretty much, if the customer demands it you have to do it. But you can have fees associated with supporting boxes that they might be messing with.
I like the idea of the extra fees bit.
Also see about making a group for that one/few pcs and only give them admin on those, to help them keep the fees down.
-
@dashrender said in Giving out admin details:
@scottalanmiller said in Giving out admin details:
Pretty much, if the customer demands it you have to do it. But you can have fees associated with supporting boxes that they might be messing with.
I like the idea of the extra fees bit.
Also see about making a group for that one/few pcs and only give them admin on those, to help them keep the fees down.
It's decently common. Minimum charges only applicable when the MSP has 100% admin control. Once they can't be sure of why things are breaking, there is more to pay.
-
@scottalanmiller Thanks all - I like the fees idea.
It would be a good idea if it was possible to create an account but on a timer. IE. This account will self-destruct in 3 days. Giving them a small window to do what they want. thanks all again -
@joel said in Giving out admin details:
@scottalanmiller Thanks all - I like the fees idea.
It would be a good idea if it was possible to create an account but on a timer. IE. This account will self-destruct in 3 days. Giving them a small window to do what they want. thanks all againThat is what AD account expirations are for. . . you set when they expire and an AD admin would have to go and extend the duration if needed. . .
