Unlocking Windows Users

Approach

Pros

Cons

Do nothing (call help desk).

Zero setup.

Zero benefit.

Domain secure kiosk account.

Easy setup. No client software.

Generic, no password domain account.

Personalized SKA accounts.

No "guest" domain account.

Lots of specialized domain accounts.

Local secure kiosk account.

No "guest" domain account.

Client software deployment.

GINA wrapper DLL; Vista Credential Provider

More user friendly.

Risk of workstation damage if improperly installed.

Local software + dedicated VPN.

Enables password reset for mobile or at-home users who are locked out.

Client package, at least to mobile.

IVR access.

Simple setup, no client software.

Cannot manage local passwords. Users don't want to talk to a machine.