11 / 29
random passwords to systems:
Periodically (e.g., between 3AM and 4AM).
When users check passwords back in.
When users want a specific password.
On urgent termination.
Suitable for servers and PCs on the corporate network.
initiated by user devices:
Opportunistically, when connectivity is available.
Suitable for off-site laptops, systems in a DMZ.