Lately I've been getting a lot of feedback from people who are having difficulty logging into our virtual labs. The login issues are mainly two fold.

  • Users can't find the login information as it is not posted in an obvious place.
  • The password itself is difficult to enter for people in non-english speaking countries, as we use a combination of upper case, lower case, and symbols.

Well we've heard all your feedback and I wanted to let you know that we are working actively to address the issue, but I need your help.

In order to simplify the experience for you our customer, we're thinking of removing passwords altogether from all of our labs. This would mean that in order to login you would just need a valid username. The second part of the plan involves posting this default username in a very clear place on the lab-launch page in such a way that it is extremely obvious.

This introduces a dilemma however, and this is where your feedback comes in. As a company Microsoft is heavily focused (as you know) on security. We highly discourage having machine logins that do not require passwords as they are a hacker's dream. Based on this we do not want to remove passwords from our labs at the cost of being perceived as encouraging bad practices.

I appreciate your thoughts (comments) on this approach.