Company Password Management

Tarqy · 21 Nov 2012 at 10:49

I'm looking for some suggestions on a password management system to centrally store various server and application usernames/passwords. Ideally it would need to have the following -

Be multi user.
Be accessible from any computer on the network.
Have access auditing.
Active Directory integration (would be nice but not necessary)

Hopefully someone has heard of or is using something similar.

Cheers

Ev0 · 21 Nov 2012 at 12:18

What sort of scale are we talking about, number of users/accounts to be managed/budget?

Have used Cyber Ark in the past as an enterprise solution, when setup well it works nicely.

Tarqy · 21 Nov 2012 at 12:50

Around 15 users and 200 accounts/passwords, looking for something relatively cheap/free.

Just want to move away from the current spreadsheet and "gate keeper" system as its not ideal having to constantly bug someone every time we need a password.

mejinks · 21 Nov 2012 at 23:37

I used keepass with the database stored on a shared drive. Not sure it does ad integration, but works really well for what we use it for.

Tarqy · 22 Nov 2012 at 07:55

Ok thanks, will take a look at the 2 mentioned.

Gaijin · 22 Nov 2012 at 08:43

We also use keepass but we don't have separate logins nor do we audit access.

Ev0 · 22 Nov 2012 at 10:44

If you're looking for cheap/free then as said Keepass isn't bad.

Craig321 · 22 Nov 2012 at 10:46

PassPack.

We've been using it for over a year now at work now. Your other option is LastPass, now idea how good that is though.

[Edit]
Don't think PassPack does access audits, LastPass might though. If you want something sitting on its own server with auditing then SecretServer is good: http://www.thycotic.com/products_secretserver_overview.html. It may integrate with AD as well.

Deleted member 77746 · 22 Nov 2012 at 11:18

Anyone come across web versions of password management?

Craig321 · 22 Nov 2012 at 12:48

mrbell1984 said:
Anyone come across web versions of password management?

PassPack & LastPass

volkan · 22 Nov 2012 at 14:23

We use Secret Server. Web based, multi-user, auditing, AD integration. Works perfectly:

http://www.thycotic.com/products_secretserver_overview.html

Deleted member 77746 · 22 Nov 2012 at 18:53

Anyone using PHP versions on their own internal server?

EDIT: I tried the ones above and I don't like them