(no subject)

[jecook]

Heh. We had a minor panic situation this morning that might have involved us invoking the federal wiretap laws.

Against one of our own employees.

who has a tendancy to meddle in our affairs when said person feels that we are not doing something fast enough for their liking.

Comments

[kalium.livejournal.com]

Ooh, shiny!

[jecook]

Yeah.

alas, it turns out that he was using a differnt wireless access point then the one of the company next door, one that we as the IT department does not support, and is not parked on our network.

but that's a longer story. :)

[kalium.livejournal.com]

Do tell.

[jecook]

Short version:

we have a few labs that our customers to use. This person got them setup on their own DSL line because we don't have those machines on the company's internal network.

So, we have two DSL lines going into one suite, and a third going to the suite we have in the next building.

the DSL routers support wireless, so he has them turned on.

THis person also has a history of just doing whatever the hell he wants with copany equipment, and usually does not tell us. he's gotten better lately, but he's still annoying.

He's also adept with computers, so he is both my best user and my worst user. He's in for a HUGE surprise when we bring his laptop up to company spec and revoke his local Admin access... ::cackles madly::

[grayhawkfh.livejournal.com]

OMG...to be a fly on the wall to see his face when he sees his access is revoked...bwah-hahahahaahaaa

[greeklady.livejournal.com]

What you can't revoke access remotely? And then force a reboot?

[teraflops.livejournal.com]

What's to stop him from cracking the local admin PW and giving himself access again? I don't think it's realistically possible to keep a user from gaining local admin, especially on a machine they can pick up and take home to tinker with.

[kalium.livejournal.com]

Order of the Golden Star?

[teraflops.livejournal.com]

I don't get the reference.

[kalium.livejournal.com]

http://catb.org/~esr/jargon/html/S/star-out.html

[jecook]

Because we can fire his ass, no matter how far up the chain, if he does it. We take security breaches very seriously.

[jecook]

Not yet. We are trialing it in our most remote site, and it works mostly ok.

[teraflops.livejournal.com]

That works :-)

[triss.livejournal.com]

There's a more significant law for this situation tho - the 10-finger rule.

If he's got 10-finger access to the system, he can get local admin, nothing anyone can do about it if he's determined enough. Passworded BIOS can make it a nuisance, tho.