Employee password resets continue to drive a big volume of the service desk tickets. Aside from draining IT resources, they also introduce a security vulnerability to your business. Can your service desk verify that a user is really who they say they are before resetting their password, and granting them access to an account?

User verification at the service desk primarily relies on knowledge-based questions using static Active Directory information, with “what is your employee ID?” as the most common verification question. Unfortunately, this form of user verification does very little to validate the user. Without the tools in place to enforce and track user verification at the service desk, your business could face non-compliance.

Specops Secure Service Desk increases security with stronger authentication methods that minimize the risk for user impersonation. Identity verification options range from mobile or email verification codes, to commercial authentication providers such as Duo Security, Okta, Symantec VIP, PingID and YubiKey. All of the supported identity services go beyond the knowledge-based “something you know” method by requiring “something you have” such as the possession of a device.