A list of all the things you shouldn't do in IT. Be it as an Engineer/Technical Specialist, Manager, Officer/Executive, or other!
In the style of Skippy's List, feel free to contribute all the bad ideas/decisions that led to chaos in your IT Department/Engineering Team/Technical organization/Company.
- Keep it simple.
- No names of people or companies. Keep it anonymous.
- Only things you have participated in or witnessed first-hand.
- If you get a laugh, share the list with someone who could use one.
- You must not expose LAN workstations RDP port to the internet directly. Regardless of what port number you use, they will be found, they will be probed, and you will eventually get cryptolocker'd because of a temporary password reset that is too weak, RDP vulnerability, etc.
- You should not put a list of the plain-text SQL Admin passwords of your clients on the company sharepoint because you don't like asking the DBA's for support.
- You should not have all domain user passwords set to their phone extension (3 digits) so that a manager can get into needed files "just in case" the employee is not at their computer.
- You should not tell the client that they will be getting new laptops in 2 weeks when your procurement team can't get them delivered to your asset management team for 3.