In this access control system, a remote authentication and authorization server for some users, including in the preferred embodiment some system and network administrator users, is accessed by the system or network of systems through encrypted communications over an insecure channel such as the Internet.