I recently switched to a new laptop at work, so IT had to set it up for me and move my files over. The problem is they asked for my password to do it. I balked, and after some hemming and hawing on their part, they agreed to attempt it without the password. It seems like this is their standard practice, and I got the feeling I'm the only person that has ever not provided their password.
I work for a very large company, and they are concerned about security. This isn't some rinky dink operation, so I struggle to believe that it is corporate policy for IT to ask for passwords. I suspect it's a practice specific to the local IT at my office, and that corporate wouldn't be too happy about it.
So my question is, should I report this practice to someone higher in the food chain? I'm sure IT is just trying to do their job effectively, and I don't want to get anyone in trouble for that. It'd also be obvious who made the report, and I do not want to get on IT's bad side. It seems like a terrible practice to me, but they presumably do it for a reason, and I may do more harm than good (especially to myself).
Should I say something about them requesting passwords or keep my mouth shut? If I do report it, is there a way to minimize the concerns outlined above? I don't want to get anyone fired, and I don't want to make any enemies. I just want my local IT to use good security practices, whatever that is to my company.
Note: I'm not asking if this is a reasonable practice, or if I should give them my password. I know I shouldn't, and I didn't.