Anyone else worried about the implications of a pass the hash attack?
Do others have individual local admin accounts that are unique to each machine as this to me is the only way thwart an attack? Kaseya encourages you to use a generic admin account and if this a domain account then any attack will spread like wildfire.
I've used the Local Administrator Password Solution. It uses group policy to configure/change passwords for a local user account, very easy to implement.