Questions tagged [password-management]
Procedures, policies and constraints on password entry, lifetime, change, strength, and storage. An essential part of access management, together with policies on other forms of authentication.
165
questions
0
votes
0
answers
24
views
Save private key passphrase OpenVPN on debian
I installed the OpenVPN 3 client on my debian bookworm, but every time I start the daemon it says Private key passphrase:.
How can I store the passphrase? It's annoying type the password every time I ...
2
votes
1
answer
127
views
How can I determine, using Powershell, without MS Graph, the ability of a user to use Self Service Password Reset (SSPR)?
I don't have access to Microsoft Graph in my environment due to permissions afforded me.
MSOnline, in addition to being deprecated, only allows pulling 30 days of records.
Is there any other way to, ...
- 232
0
votes
0
answers
20
views
Secrets management for Azure DevOps IAC
I have an Azure Devops Infrastructure As Code (IAC) allowing users to deploy virtual machines using terraform pipelines and to access them using SSH or RDP.
For the moment, the process is the ...
0
votes
1
answer
32
views
Best practice with admin accounts and passwords [closed]
My team is responsible for a big ERP application. We have both developers and devops.
Sometimes we need to login to production and do "fixes". It can be to correct corrupt data, workaround ...
- 197
0
votes
0
answers
137
views
LAPS Update-AdmPwdADSchema not listed in AD attributes
Having issue getting AD to see added attributes.
(found this - LAPS Update-AdmPwdADSchema doesn't add the attributes - does not say how added.
Have ran the scripts to add the attributes. Says they ...
- 1
0
votes
1
answer
793
views
LAPS - Unable to view passwords but able to decrypt
I'm testing Windows LAPS on one test OU with one computer in it. Everything is working as expected, except I'm the only user that is able to view the LAPS managed password.
If I run the below, where $...
- 81
0
votes
1
answer
1k
views
New LAPS - Authorized password decryptor not updating permissions as expected
Created a new group DOMAIN\LapsAdmins. Currently empty.
Configured GPO Configure Authorized password decryptors to point to my group DOMAIN\LapsAdmins
Forced server1 to create a new encrypted password ...
- 348
0
votes
0
answers
387
views
Storing Hashed Passwords for Docker and Docker Compose
What is the best way to store passwords and use them in Dockerfile and docker-compose.yaml. Can I store the secrets in a hashed format and make use of it, So that no one can read my real passwords ...
- 11
0
votes
1
answer
821
views
Can the Maximum machine account password age be set differently for one OU on a domain controller
In my organization, when we provision a computer one of the steps includes joining our domain. Typically we provision one pc at a time as the need comes up. I would like to get out of this habit and ...
0
votes
1
answer
828
views
vaultwarden on a public IP - is it worth to restrict to VPN only?
I feel a bit embarrassed to ask this, because I am not able to figure it out myself.
I run a vaultwarden instance (open source bitwarden) on a public VPS on the open Internet. It is properly set up ...
1
vote
1
answer
1k
views
LAPS Update-AdmPwdADSchema doesn't add the attributes
So I've installed LAPS according to THIS article. I've done this on 3 domains so far with great success but on the 4th one, for some reason, the attributes ms-Mcs-AdmPwd and ms-Mcs-...
- 85
2
votes
2
answers
7k
views
How can I set the 'password last set' date of an AD account?
In a development environment I want to modify the 'password last set' date of my AD accounts so they won't begin to expire during development phase, but as soon as the environment becomes a production ...
- 687
2
votes
0
answers
4k
views
OpenVPN - How to suppress WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
In OpenVPN GUI, I am getting the red message
WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this.
I do not want to always re-type my password ...
- 210
0
votes
1
answer
5k
views
Change Windows PIN requirements in Intune for an Azure AD-joined PC
I am the part-time admin of a small nonprofit, with a Microsoft 365 Business Premium subscription. I have been searching through admin.microsoft.com and portal.azure.com, but can't seem to find the ...
- 344
1
vote
1
answer
341
views
How to notify administrators of an Active Directory pwd change?
I don't know much about AD or Windows security. As in this question, I understand that pwd change notification can be useful for both users and for system administrators.
As an AD administrator on ...
- 230