[sims] SIMS .net really is garbage isn't it???

[Jawloms]

I'm not after a solution (unless there is one!) just grumbling really about how rubbish SIMS .net is again.

 

New user setup a couple of weeks ago. She can't log in as she lost the note with her original password on it; you know the random selection of numbers and letters. Not a problem! I go in to SIMS, look it up by going in to manage users and typing her surname in and clicking search. Give it to her again. Won't work. Check I've done it right and I have. Still won't work whether she does it or I do it, on her laptop on on my known working laptop. Seearched for her again and this time double clicked the result. Completely different username and password displayed, and everytime you double click her username in the "Browse" bit it generates a different password. The password in the "Browse" bit is always displayed the same. Screenshot attached.

 

Grumble grumble, moan moan, swear swear.....

 

Stuart

 

P.S. Hackers - This is not her password anymore.

 

Edited December 4, 2018 by Jawloms

[matt40k]

Use AD logins. Problem Solved

[Jawloms]

Capita stop being rubbish and write their software properly - problem solved.

 

I'd use the AD logins if I felt more staff would lock their computers when they walk away. I just don't trust them enough.

[matt40k]

Auto lock after 5 mins? Its not really a problem nowadays with Windows 10 an Windows Hello \ pins.

 

SIMS passwords aren't really secure, for starters, they aren't case sensitive. They can be brute forced and we'll ignore most people have them written down on a post-it note either in the laptop bag, or worse on the laptop!

[Jawloms]

Auto lock after 5 mins? Its not really a problem nowadays with Windows 10 an Windows Hello \ pins.

 

SIMS passwords aren't really secure, for starters, they aren't case sensitive. They can be brute forced and we'll ignore most people have them written down on a post-it note either in the laptop bag, or worse on the laptop!

 

I tried auto-lock and got told to remove it again as it's the PC which is connected to the projector and teachers like to leave the same slide displayed for more than five minutes sometimes. Clearly the "freeze" button on the projector remote is a little too taxing. It was a couple of years ago I tried it, perhaps I can have another go and throw GDPR in to the mix a bit.

 

Whilst the passwords may not be secure, they are enough to prevent a student jumping on the teachers PC if they leave the room for more than two minutes. Not a problem we have had here, but there's always a first time.

 

The non-case-sensitive passwords has always made me laugh as the dialog box shouts at you if caps lock is on! Stupid SIMS.....

[MrEprise]

AFAIK, It doesn't do it if you go through the old System Manager 6 UI and will always display the initial generated password but this assumes they've not changed its behaviour since I last used it.

[jthompson]

It would be nice if the trusted auth system still prompted for the AD password. You'd get the benefit for end users of SSO, with less risk posed by unlocked desktops (provided SIMS .net isn't already open).

[matt40k]

It would be nice if the trusted auth system still prompted for the AD password. You'd get the benefit for end users of SSO, with less risk posed by unlocked desktops (provided SIMS .net isn't already open).

That's like putting a sheet over your doorway to make your home appear secure to people driving past rather then buying a door. If only you could get a MIS that is designed to work on untrusted devices so security isn't assumed, maybe it could be web based and use that cloud people keep talking about.

Edited December 4, 2018 by matt40k

[2ilent8cho]

Only thing you can do is vote with your feet. Many MIS's out their, yes the initial move is painful, but its worth it to save years of more pain staying with SIMS.net.

[jthompson]

That's like putting a sheet over your doorway to make your home appear secure to people driving past rather then buying a door. If only you could get a MIS that is designed to work on untrusted devices so security isn't assumed, maybe it could be web based and use that cloud people keep talking about.

 

A sheet with a front door printed on it, maybe.

[howartp]

As an aside, I can't replicate this - it's showing the same password for an unset user every time I double-click, close, open, search, blah blah.

 

Peter

[Knil92]

Does it come up with a password mismatch error when they try to sign in or does it just say invalid username/password? The only time I've seen anything like that is when I was trying to destroy my training data. Also have you tried validating memberships, its weird but it fixes weird issues like this sometimes. Tool>Validate Memberships

[JJonas]

I'm getting invalid username/password for three new users and I cant see what is wrong. I have gone thorough everything I did to create them and it all looks fine.

 

Any suggestions of what to do will be most appreciated so long as it is not ring Capita (already done that and been waiting all day for them to call me back)

[Hate_Lee]

Never had a problem with this. The Browser won't update until you refresh the screen by clicking Search. If you save the record then click search in the browser the passwords will be the same.