Friday, July 3, 2026
HomeCyber Security10 finest practices for Home windows workstation password adjustments over a VPN

10 finest practices for Home windows workstation password adjustments over a VPN

[ad_1]

10 finest practices for Home windows workstation password adjustments over a VPN
Getty Pictures/iStockphoto

Distant work is now a lifestyle for a lot of workers, and getting assist for technical points will be tougher and time-consuming. For a lot of employees, the times once they might convey their tools over to the assistance desk (and even have it come to them) whereas on premises are gone or largely decreased.

As somebody who works 100% from residence, I’m nicely conscious that not solely is my connection to the web my lifeline for work, however entry points can rapidly break my day … or a number of days.

Working example: Probably the most disturbing distant work experiences includes mandated Home windows password adjustments on a company-issued laptop computer. This course of should be carried out whereas related to the VPN so the laptop computer can talk the password change to the Lively Listing Area Controllers. Every little thing is tied collectively; going ahead it’s essential to have the ability to log into Home windows to log into the VPN to acquire the required entry.

But when your password change goes awry, you’re now in a type of catch-22. You’ll be able to’t get into your workstation to launch the VPN to attempt to right the issue with one other password reset by yourself.

Worse, whereas your assist desk can simply reset your Lively Listing password to one thing new, that’s not going that will help you log into your workstation in case you’re off the VPN since it will possibly’t talk with Lively Listing to authenticate.

You’re lifeless within the water. You would possibly even need to ship your laptop computer to the assistance desk for remediation, or on the very least look forward to them to ship you a loaner.

And flubbed password resets have occurred to me—however happily I had an workplace 20 minutes away that I might drive to so as to get this resolved. That workplace now not exists.

Ideally corporations will arrange public-facing password reset portals for workers that depend on multi-factor authentication, whereby you possibly can log in with VPN credentials after which reset your related Lively Listing accounts. Nonetheless, not each enterprise provides that benefit.

Expertise has taught me that these 10 finest practices for distant password adjustments may also help guarantee easy crusing.

SEE: Home windows 11: Recommendations on set up, safety and extra (free PDF) (TechRepublic)

1. Set a calendar reminder for when your password will expire

Not solely is nothing worse than being broadsided discovering out your password expired, generally this could preclude entry totally (relying on the corporate/Lively Listing coverage). Discover out when firm passwords expire (the assistance desk will know): 60 days is a standard setting. Set a calendar reminder on the day of your subsequent password change and have it recur, say, each eight weeks (56 days within the case of a 60-day expiration coverage) to reset your password earlier than the clock runs out.

2. Make sure that to vary your password not less than 24 hours upfront

On an analogous notice, don’t skip the reminder and wait till the final second to select a brand new password. The naked minimal must be 24 hours upfront of the expiration time, as I’ve discovered passwords want a little bit of time to settle and synchronize (even in native on-premises environments).

3. Get something vital completed first

On password reset day, I like to recommend caring for any pressing points your day requires earlier than altering your password. If one thing goes flawed you’ll not less than have the peace of thoughts realizing your vital duties had been carried out.

4. Time the password reset for the center of the day

It’s tempting to attend till the tip of the day to enact a password reset because you’re nearly to be off the clock anyhow. Nonetheless, the assistance desk workers might be, too.

In case you reset your password round lunchtime, chances are high you’ll not solely have that point interval to hunt help however a number of hours remaining within the workday.

Now, many assist desks are world and staffed 24x7x365, that means you might get assist after hours, however chances are high you’d favor to spend as little of your free time as attainable acquiring help.

5. Write down your assist desk’s quantity

I discovered this out the arduous approach after I needed to name a colleague for mentioned quantity when a password change went flawed. Many corporations put the assistance desk hotline proper on the desktop of company-issued machines, or add the URL to their web site within the browsers, however in case you can’t log in you possibly can’t get to both.

I taped the assistance desk hotline written on a Put up-It notice on my firm laptop computer. That’s helped me out greater than as soon as.

6. Arrange an alternate account if allowable

This one could also be a swing and a miss relying on firm insurance policies, however in case you can arrange (or have arrange) an alternate Home windows account for emergency functions you possibly can log in with that, then hook up with the VPN so a brand new password issued to your individual account will likely be registered in your laptop computer.

Many assist desks have already got backdoor accounts on company-issued workstations for this goal and hand out the password to customers in emergencies. They will then reset these passwords to discourage customers from accessing the backdoor accounts with out authorization.

7. Check sort the password earlier than you alter it

Choose your new password then open Notepad, Phrase or a command immediate and kind it in to visually verify all characters seem. This can rule out any issues along with your keyboard.

It sounds far-fetched, however a sticky Shift key as soon as nearly gave me an ulcer as a result of the “#” in my password was being entered as “3” and I saved locking out my very own account.

8. Save the brand new password in a password supervisor

Earlier than you alter the password, reserve it in a neighborhood password supervisor akin to KeePass or Password Secure. I’m an enthusiastic advocate of KeePass, because it has made password administration so easy for me. It could retailer all of your passwords together with prior variations thereof, and might even generate passwords for you, however there may be one caveat …

9. Memorize the password upfront

Having a password supervisor generate passwords so that you can use as your level of entry to your workstation is a nasty concept except you will have a wonderful reminiscence. Probably the most fundamental sort of password it will possibly difficulty is a 40-bit password like ffc12844a1, which works nicely for a URL you’ll entry after you log in (and you’ll simply copy and paste the password in with out ever actually realizing it), however not so nicely except you intend to spend not less than 5 minutes typing this in time and again to memorize it.

A greater possibility is to select a personally significant password — however not too significant. I exploit passphrases to create passwords, akin to “I like Purple Sox baseball within the spring #1” (notice: not my precise password), which is also truncated to IlRSbits#1 utilizing the primary character of the phrases proven.

You don’t wish to create some whiz-bang fancy super-secure password that you simply’ll overlook in seven minutes. And I can’t encourage writing firm passwords down on paper.

10. Lock your display moderately than reboot

I saved an important tip for final. If you change your Home windows password don’t reboot. Keep on the VPN and lock your display with the Home windows-L key mixture. Your workstation will proceed to speak to Lively Listing. If the password change didn’t take or your account finally ends up locked out, the assistance desk can reset/unlock it and that ought to hopefully mean you can log into the workstation as soon as extra.

[ad_2]

RELATED ARTICLES

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Most Popular

Recent Comments