Agreed, anyone that falls below the CIO gets called IT.

Bastards! I love my read-only Fridays

Another option could be password less. Basically use Microsoft authenticator app to insert a code that popped up in the screen. Need both devices in order to sign in. If all users already have work phones and work laptops it’s pretty reasonable setup in a Microsoft shop.

Working on implementing our new cmdb Axonious. It’s awesome and has around 900 connectors built in but tons to configure still.