kennysarmy Posted December 12, 2017 Posted December 12, 2017 A teacher has contacted us as he could not log in to SIMS.net He successfully logged in at 8am this morning and tried to access SIMS.net again mid morning. We checked in System Manager and his password had been RESET! Is there a log to find out which account has done this as none of the SIMS admins have done it - very strange! Is there a way that a user's password could reset itself? I was giving additional rights to some users this morning (adding them to the Pastoral Manager Group) and the user who's password was reset was one of them? Co-incidence?
bobsmith Posted December 12, 2017 Posted December 12, 2017 I had this issue this week too. I had assigned personnel assistant as an extra permission and then her password was showing as reset! Hmmmm..... I've changed peoples permissions tonnes of times before and not had this issue. Could this be the latest SIMS update doing this?
Rob_D Posted December 12, 2017 Posted December 12, 2017 We have a "Change Password" option on the SIMS login screen for all users. Could this have been used?
kennysarmy Posted December 12, 2017 Author Posted December 12, 2017 We have a "Change Password" option on the SIMS login screen for all users. Could this have been used? If he'd changed his password himself I don't think it would show as a RESET password though! - - - Updated - - - I had this issue this week too. I had assigned personnel assistant as an extra permission and then her password was showing as reset! Hmmmm..... I've changed peoples permissions tonnes of times before and not had this issue. Could this be the latest SIMS update doing this? Were you able to recreate this behaviour? We tried with a test user and it did n't reset the account when additional rights were granted with the user logged in!
bald_pig Posted December 12, 2017 Posted December 12, 2017 I'm wondering if it's something to do with password complexity?
kennysarmy Posted December 12, 2017 Author Posted December 12, 2017 I'm wondering if it's something to do with password complexity? Care to expand ?
Rob_D Posted December 12, 2017 Posted December 12, 2017 Care to expand ? At a guess: Do the changes in permissions require the user to have a more complex password than they did?
bobsmith Posted December 12, 2017 Posted December 12, 2017 Haven't tested it yet - but i have a guinea pig i can test it on
bald_pig Posted December 12, 2017 Posted December 12, 2017 At a guess: Do the changes in permissions require the user to have a more complex password than they did? What he said.
Banjo Posted December 13, 2017 Posted December 13, 2017 Don't think its that. Created a class teacher with a password of 'password', gave it every permission there is in SIMS and could log straight back in using password. There is nothing in the sims.db_user table that's helpful either. 1
MrMat Posted December 13, 2017 Posted December 13, 2017 A teacher has contacted us as he could not log in to SIMS.net He successfully logged in at 8am this morning and tried to access SIMS.net again mid morning. We checked in System Manager and his password had been RESET! Is there a log to find out which account has done this as none of the SIMS admins have done it - very strange! Is there a way that a user's password could reset itself? I was giving additional rights to some users this morning (adding them to the Pastoral Manager Group) and the user who's password was reset was one of them? Co-incidence? How odd! Last week, we had a very similar phone call. The school called saying a whole bunch of users logged in just fine at 8am but then couldn't log in mid-morning. Checked the accounts and they had been set as Inactive so had to be re-activated and have their passwords reset. Very strangely, it was in alphabetical order i.e. only those with surnames beginning with A - L were affected. No idea how it happened or what could have caused it. To be honest, if someone had told me about it, i probably wouldn't have believed it!
kennysarmy Posted December 13, 2017 Author Posted December 13, 2017 It still amazes me that there is no audit trail of changes made to the SIMS database! 3
TomHD Posted December 13, 2017 Posted December 13, 2017 ^ This!!! Is insane and just another example of education/government software being mostly utter sheet! 1
johnpd Posted December 13, 2017 Posted December 13, 2017 Can audit mode be switched on when using the sql enterprise version rather than std? I seem to recall trying to audit a std sql and I hit a brick wall but found it works with enterprise sql.
Marci Posted December 13, 2017 Posted December 13, 2017 It still amazes me that there is no audit trail of changes made to the SIMS database! Am guessing they just expect you to turn on auditing at the SQL Server and monitor from there to save themselves the work of integrating it into SIMS itself. 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now