I'm working on a project where one user creates the accounts for several other
users (typically one manager to 4 to 20 operators). It's an equipment (not
office environment, not web) and the operators may have only a numeric keypad.
We've seen 3 options so far:
1. When the manager creates an account, he also creates a password for that
user. It's up to the manager/operator relationship to make that the real
password or to require the operator to change it (the system won't care about it).
2. When the manager creates an account, it already has a default password, and
the user should change it on first use (but not required to).
3. When the manager creates an account, it doesn't have a password, and the 1st
thing that happens when this user logs in for the first time is the process of
creating a password.
We're leaning towards the 1st option but it has it's problems. Does someone know
of a better way to do this?