Why does nobody warn you about the vendor who 'just needs remote access' for a 10 minute fix?
A guy who set up our office switches in Sacramento asked for our admin password to 'check one thing,' and when I pushed back he got weird and defensive, so if a vendor ever wants the keys to your whole network for a quick fix, that is your sign to hang up and call someone else.
Funny thing is I almost handed over our admin login once because the guy sounded so calm and sure of himself. Ten minute fix turned into him poking around for two hours while I stood there like an idiot holding a coffee. My own rule now is simple, nobody gets the keys unless they can tell me in plain words what they plan to touch and why. If they can't explain it without getting huffy, that tells you plenty. A real tech will walk you through it or just do it in front of you. Defensive and vague means the door stays shut.