Remote PC/Laptop management - legalities?

ajf · 30 Jan 2015 at 14:59

We use a couple of remote support products at work to remote access users machines - both on and off site.
Both software allows access without needing users permission, but is only ever used for support purposes.
However, as long as the machine has an internet connection it can theoretically be accessed anywhere and any time.

It seems something has got said, been taken out of context and gone on to whether this practice is acceptable and legal.

Any thoughts?

tribz · 30 Jan 2015 at 16:03

I have unatended access into our clients systems but we've made them aware of the fact and permission has been given to do this.

It sounds as though they didnt know it had been set up this way?

Hades · 30 Jan 2015 at 16:39

If they work for the company and use work supplied machines then I would expect it to be legal. However it is a security risk if no permission is needed.

GDL · 30 Jan 2015 at 17:55

We use one at work, the IT policy that all users read and sign sates that no personal files are to be stored on company machines and that anything and everything can and is monitored on the clients.

ajf · 30 Jan 2015 at 18:19

Thanks for the feedbakc, and seems to confirm what we thought!
Yes, there is a relevant policy in place.
When I said without permission, I meant from the end user.
Each machine communicates back to the internal support server when connected, but there is an IT admin password that we need to actually access the machines.

Caged · 30 Jan 2015 at 20:07

Do you all share an account, or can access be traced back to an individual?

Do you audit the logs at all?

ajf · 2 Feb 2015 at 10:44

One account, but there is only two of us!
Not sure about logs to be honest.

Little_Crow · 2 Feb 2015 at 14:23

Depends what the business is, if users could be accessing health or legal information then that could be problematic.
Our system allows access with no prompting if no user is not logged (i.e. it's at a login screen), or will prompt the user to allow/deny access if someone is logged in.

ajf · 2 Feb 2015 at 17:48

No, nothing like that.
i've confirmed though that the software does log what machine accessed which remote machine so tracability, regardless of specific login details.

I think the 'storm' has blown over now anyway