Active Directory Password Resets Surge Amid Hybrid Work Challenges
- Securityish
- Tools & Best Practices
Quick Summary
The Securityish Brief
The transition to hybrid work has fundamentally altered how organizations manage password resets. As of 2022, 51% of remote-capable employees in the U.S. operate in a hybrid model, spending an average of 2.3 days per week in the office. This new work environment has made password resets a more complex issue, with Gartner reporting that they constitute 40% of helpdesk calls. The increase is not due to forgetfulness but rather the challenges posed by remote connectivity and security policies.
Remote employees often face account lockouts because cached credentials on their devices become outdated when they are not consistently connected to the corporate network. For instance, if an employee changes their password while connected via VPN and then attempts to log in later using cached credentials, they may encounter a lockout. This situation necessitates a helpdesk call, which delays their ability to work.
In response to security threats, many organizations have mandated more frequent password changes for remote access. Nearly half of Chief Information Security Officers (CISOs) view hybrid and remote employees as significant security risks, prompting them to increase password rotation requirements. Each mandatory change heightens the likelihood of employees forgetting their new credentials.
The financial implications of these password resets are substantial. Forrester estimates that each reset costs organizations about $70 in IT resources, which can add up quickly. Data from over 700 organizations shows that the average company processes 923 password resets annually, resulting in costs nearing $65,000 per year. Additionally, the hidden costs include lost productivity for employees who are locked out and unable to work while waiting for IT support.
To address these challenges, self-service password reset tools have emerged as a viable solution for hybrid work environments. These tools allow employees to securely reset their credentials without needing IT intervention, significantly reducing downtime. For example, Specops uReset enables users to create new passwords that sync across all devices, including updating cached credentials.
Organizations that have implemented self-service solutions report measurable savings, averaging $65,000 annually on resets and an additional $48,000 on account unlocks. This approach not only streamlines the password reset process but also allows IT staff to focus on more complex issues.
Why Self-Service Solutions Are Crucial
As the frequency of password reset incidents continues to rise, organizations must adapt their strategies. Self-service password reset tools like Specops uReset are designed to tackle the unique challenges posed by hybrid work, ensuring that password changes propagate correctly across devices. By investing in these solutions, organizations can mitigate the operational disruptions caused by password-related issues.
Key Takeaways
- Consider implementing self-service password reset tools to reduce helpdesk workload.
- Educate employees on managing cached credentials to prevent lockouts.
- Review and update password policies to balance security and usability.
- Monitor password reset trends to identify chronic issues among users.
- Evaluate the cost of password resets and lost productivity in your organization.
Key Terms & Concepts
- Active Directory: In this article, Active Directory refers to a directory service used for managing permissions and access to networked resources.
- Self-Service Password Reset: Self-Service Password Reset tools allow users to reset their passwords without IT intervention, improving efficiency and reducing downtime.
- Cached Credentials: Cached credentials are stored login details on a device that may become outdated when not connected to the corporate network.
- CISO: CISO stands for Chief Information Security Officer, a senior executive responsible for an organization’s information and data security.
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
Navigation
Your 5-Minute Cybersecurity Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.