Re: Account purge and reissue...

[Mandi Witkovsky <witkovsm () PFW EDU>]

We keep a record of all usernames associated with a person's campus ID number and if/when they return, they are 
reissued the same username.  Once a username's been used it can only ever be reused for the same person.  Of course, 
duplicates happen, but we strive to keep that to a minimum.  We do the same for vanity email addresses.

We did this partially for privacy concerns but also for good customer service.  Many in our population come and go, and 
it would be silly to reissue them different usernames each time.  We do purge accounts from AD and remove username and 
email address from connected systems, such as our SIS, but we have a separate repository that keeps a record of all IDs 
we have ever issued.

mandi



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Kimmitt, Jonathan
Sent: Wednesday, October 9, 2019 12:38 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Account purge and reissue...

Hi all,

  We have run into an issue where we are wanting to purge user accounts from our active directory, but the process we 
are currently using also purges them from our ERP (the username and associated email) from the record (to never be 
known again).

  I am curious:


  1.  How other institutions do this
  2.  if they have run into any issues with reissuing the account to a new user (and the privacy issues along with that)
  3.  do you blacklist your accounts to prevent reissue for a number of years?

Thoughts?

-Jonathan

~
Jonathan Kimmitt
CISSP, PCIP, CEH, CIPM, GPEN, CIPT, CIPP/E
Chief Information Security Officer
Information Technology
The University of Tulsa
918.631.2743

Jonathan-kimmitt () utulsa edu<mailto:Jonathan-kimmitt () utulsa edu>


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community