My friend and coworker Scott pointed me to an article by Robert Hensing on his new security incident-response weblog that does a great job of explaining “Why you shouldn't be using passwords of any kind on your Windows networks.”

The fact that Microsoft's security people are now starting to blog about their areas of expertise is awesome - and I realize it's not an easy thing for security management to buy into for a number of justifiable reasons. What Robert suggests in this article is right on the money, and is where many companies are already heading (and where the rest should be heading).

Subscribed: