In a Windows environment, does the network administrator have access to the user network password? Can he use the user LAN credentials to login to his machine when the user is away?
EDIT –
I ask this because my company has implemented SSO to ADP payroll website. If I'm logged in to Windows, I'm automatically logged in to our intranet site. And if I click on ADP link on my intranet site, it automatically (SSO) logs me into ADP portal.
Given this, my network admin can see my personal info, if he has access to my LAN network user/pass. I understand that admin can reset pass etc. but does he have access to real user password on LAN?
Best Answer
No. The domain administrator does not have access to any other users password and can't logon to the domain as that user, unless the user has given the domain administrator their password.