Another issue that concerns me is I assume the script you want to run at log in would contain a cleartext version of the local administrator password. It's generally not good practice to have files containing this type of data reside on workstations for any length of time. If you need to distribute the script to multiple workstations, you should do so from a centralized workstation once and then remove the file yourself.
Dig Deeper on Web authentication and access control
Related Q&A from Mike Chapple
Choosing to encrypt confidential data with AES or DES encryption is an important cybersecurity matter. Learn about the important differences between ... Continue Reading
It's not possible to eradicate the risk of DoS attacks, but there are steps infosec pros can take to reduce their impact. Mike Chapple shares ... Continue Reading
The HHS OCR ruled that healthcare ransomware attacks are HIPAA violations, so these covered entities need to react according to the HHS's guidance. ... Continue Reading