Hi everyone, since we're mostly all in the same profession, I figured I'd pose this theory here since it comes up quite a lot. Example: A client comes in and they've forgotten the password to their computer r a single user account and wants us to reset it or remove it for them. Even if we go through having them prove ownership of the device, is it ethical to actually perform the service?
There are countless reasons why not to do it, and only one good reason to do it (they legitimately forgot their password). On the other hand, they could be attempting to see what their gf/bf/spouse is up to, they could have stolen the laptop or bought it as a stolen laptop, etc.
What does everyone do? Does anyone have any hard policies against this kind of service?
Just asking since y'all are some smart folks who I'm sure have been asked to do this for clients.