Enterprise Password Management

[sourceninja]

I'm looking for suggestions on enterprise password management tools.

Our team needs to share things like domain admin accounts for clients, root passwords, etc to our engineers. Currently this isn't done in the best way and we are trying to improve this process.

I'm looking for tools that allow passwords to be shared and access to be controlled for users. I'm investigating lastpass enterprise, but I"m looking for other options to compare it to. Any suggestions?

 

[Chiefcrowe]

I'm not aware of any good programs but lastpass enterprise sounds promising. Please let us know your experiences with it when you test it out.

 

[lxskllr]

I don't know a thing about enterprise computing, and with that in mind, why couldn't you use a standard password manager, with the db synced to your server? Everyone gets access to the manager, and the master password gets changed when an employee leaves.

 

[sourceninja]

I don't know a thing about enterprise computing, and with that in mind, why couldn't you use a standard password manager, with the db synced to your server? Everyone gets access to the manager, and the master password gets changed when an employee leaves.

Not everyone needs access to everything. It needs to be on a password by password level. A field engineer might need access to their root account, but a support tech might only need access to the vpn account info (providing they won't let us setup seperate vpn's for each of our team).

 

[rajesh05]

Try http://passwordmanagerpro.com from ManageEngine, am sure it will meet your requirements. Write to passwordmanagerpro-support (at) manageengine (.) com for any assistance.

I work for ManageEngine.

 

[sourceninja]

Thanks rajesh05. That gives me another tool to check out. Looks pretty good at first glance.

 

[delonm]

Another enterprise option is Lieberman Software. They have a very sophisticated enterprise random password management solution that supports 2-factor authentication with direct RDP access to servers and network switches. The password is checked out when needed and automatically changed when checked back in.

The platform will also autodiscover privileged accounts and can even be used to manage SQL accounts and service accounts.

We have had good luck with this solution, but it may be over kill for what you are looking for.

http://www.liebsoft.com/


David

 

[tpm2013]

Take a look at our solution http://teampasswordmanager.com, it's build specifically for your needs in mind. We have a free full functional working version for 2 users that you can use to try it.

 

[DisgruntledVirus]

My group uses Password Safe. It's a small team. We have 2 password database files, 1 for the HD team that removes stuff like networking equipment logins and the second for my group that handles the IT for the company. There are only 6 of us with the master key and it's changed anytime one of us have left.

It works fairly well. Only thing is make sure that you backup the password file every so often. We have had times where it has gotten corrupted and we've needed to restore from a backup.

 

[debian0001]

We use Secret Server. I like it. We built it for out Networking Team (Sys Admins and Network Admins) but let other IT groups use it.

http://www.thycotic.com/products_secretserver_overview.html

 

[debian0001]

My group uses Password Safe. It's a small team. We have 2 password database files, 1 for the HD team that removes stuff like networking equipment logins and the second for my group that handles the IT for the company. There are only 6 of us with the master key and it's changed anytime one of us have left.

It works fairly well. Only thing is make sure that you backup the password file every so often. We have had times where it has gotten corrupted and we've needed to restore from a backup.

We use to use this, it's not very good for more than 2 people I'd say, plus the file got locked from what I remember when updating. It's not an enterprise solution at all.