now browsing by tag
I don’t often talk about the big guys on the internet, so when I do you know it must be bad!
We recently acquired a new IT Support customer which unfortunately had to deal with letting their internal IT guy go. To their surprise, they did not realize how much power he held by not letting anyone know any passwords for their network nor their IT related services.
Upon starting with the client we found they were using Yahoo Small Business Email services. We contacted Yahoo to explain the situation and we were able to get enough information to at least take control of their domain name and email administration. Here’s where it goes downhill…
Although we were able to take administrative control of the Yahoo admin account and were able to access the control panel, we could not do anything with the individual email accounts that were created under their business domain name. Yahoo only allows you to send an invitation to a new user which they in turn create an account and are required to associate it with a private yahoo email account.
In essence, if you’re the business and need to reset a password for a service, nowadays, most services require you to click on their reset password link, however, this only works if you have control of the account.
If the user leaves and/or is fired, the business has no control over the email account. The account is owned by the associated private Yahoo email account. Yahoo gives no control to the business to change the password for that email account under their business domain name. Yahoo only allows a business to create and/or delete the email accounts.
Well since the IT guy had created everything for the IT services using his email account, once he was released, the business could not change the password on the employees account. In turn, they lost any and all needed information to know how to handle all the services the IT guy had implemented.
In Summary, This situation is a bad business practice. Businesses need to realize that by giving an employee so much power they also need a way to take back the power, if and when they need to deal with a malicious ex-employee.
Yahoo, I hope you see this post, businesses need to own all related physical and digital materials that are required for the business to operate. Email accounts under a business domain name belong to that business not an individual.
Another lesson for businesses here is that sometimes it is easier dealing with a third party when it comes to IT services. At Wurlwind Solutions we understand businesses and also make sure the business feels in control always. If you are business feeling a little throated by an employee you cannot let go due to them holding your information hostage, call us and we can help. 305-359-5391
#YahooSmallBusinessEmail #ITsupport #businessITservices #BusinessEmail