Access Credential Management in New Caney, TX 77357

Five questions that show where your credentials really stand

Before anyone talks about hardware, answer these five questions honestly. Most New Caney businesses that call us can answer one or two; the rest are the job.

1. Can you list every person who can open your doors right now? Not every employee: every person, including the former manager, the cleaning crew, and the contractor who needed in for a week last spring.
2. When the last person left, how long did it take to cut off their access? If the honest answer involves changing a shared code, or “we asked for the fob back,” the credential is not really being managed.
3. What frequency are your cards or fobs? Many say “Prox” on the back or arrived in a cheap bulk bag. That usually means 125 kHz, which matters for the reasons in the table below.
4. How do your readers talk to the controller? Most older installations use the Wiegand protocol over unencrypted wires; newer ones can use OSDP with secure channel. If you don’t know, the installer’s paperwork or a look inside the controller cabinet will tell us.
5. Who can log in to the software, and as whom? One shared “admin” account used by three managers means your event log cannot say which of them made a change.

Two or more “not sure” answers means you have a management problem before a hardware problem, and that is usually fixable without replacing much.

New Caney sites we get called to, and the credential each one needs

77357 sits in northeast Montgomery County along I-69, between Kingwood and Humble to the south and Splendora to the north. Older homes on wooded lots and manufactured-home tracts share the ZIP with brand-new master-planned subdivisions, while commercial growth has followed the Grand Parkway interchange and the FM 1485 corridor. That mix produces a particular set of customers:

• Contractor, equipment and trucking yards. A gate keypad plus a shop door, with drivers and day crews who change weekly. The answer is a PIN or card per driver limited to the hours your gate is open and a date it stops working, never one code that lives in everyone’s memory.
• Daycares and private schools. Staff credentials on every exterior door, with parents entering through a buzz-in or video intercom instead of carrying credentials themselves. The management burden here is staff turnover and substitutes.
• Clinics and dental offices. The front door is the easy part. Medication storage, records and the server closet need their own restricted group and an event log that someone actually reads.
• Churches. Dozens of volunteers, a few staff, and doors that should open for a Wednesday class but not at 2 a.m. Schedule-based groups do most of the work.
• Small warehouses and flex space. Roll-up doors stay on keys, man doors go on credentials, and an office door separates the paperwork from the floor.

We reach New Caney from our Katy and Houston base; there is no New Caney storefront behind this page. Call (832) 359-2425 to confirm we can schedule your address. For a yard or a multi-door site, the survey and the work are usually separate, pre-planned visits.

125 kHz prox, secure smart cards and phones: what each one actually protects

A credential is only as strong as the secret it carries. Here is where the common options land:

Two details that bite growing businesses

26-bit card numbers repeat. The common 26-bit Wiegand format has only 256 facility codes and 65,536 card numbers per code. Unrelated businesses share numbers all the time, and if you reorder cards without specifying your facility code and number range, you can receive cards whose numbers collide with ones already enrolled. Keep a written record of your format, facility code and every number range you have bought.

The reader wire is part of the credential. Wiegand sends the card number from reader to controller in the clear. On an exterior reader with a reachable back box, a small device spliced into those wires can record numbers and replay them. OSDP with secure channel encrypts that link and lets the controller notice when a reader is disconnected or swapped, which is why it is the protocol we recommend on any new or upgraded exterior door.

Getting off shared codes and old prox without a lockout morning

The fear that keeps businesses on weak credentials is the Monday when nobody can get in. A phased migration avoids it:

1. Readers first. Install multi-technology readers that accept both the old 125 kHz cards and the new secure format. Nothing changes for staff yet.
2. Issue in parallel. Enroll each person’s new credential while the old one still works, and collect a signature on a simple issue receipt.
3. Cut the sensitive doors first. Disable legacy credentials on the medication room, server closet or cash office, where the risk is highest and the user group is smallest.
4. Cut everything else on a set date. Announce it two weeks out. Anyone who shows up holding only an old fob gets a new one at the front desk, not an unlocked door.
5. Retire the shared keypad code. If the keypad stays, it becomes per-person PINs, or card plus PIN after hours.
6. Switch off 125 kHz reading. Most multi-technology readers keep accepting old prox until they are reconfigured by configuration card or software. Skipping this step leaves the clonable door open, and it is the most common unfinished migration we find.

Keeping the list clean after the new cards are out

New hardware does not manage itself. A small business needs only a handful of habits:

• One credential, one named person. “Warehouse fob 3” in the software means the event log can never name who opened the door.
• Revoke on the last day, before the person leaves the building. Collecting the fob is polite; disabling it is what counts.
• Disable lost cards and never reprint the number. The replacement gets a new number, and the lost one stays disabled permanently.
• Expiration dates on every temporary credential. Drivers, temps, contractors and interns all get an end date at issue.
• A monthly ten-minute review. Export the active list, read it, and disable anything that surprises you.
• Blank stock under lock and log. A box of unassigned cards on an open shelf is a box of future unknown credentials.
• A backup you can find. Export the database on a schedule, or confirm what your cloud platform retains and for how long.

How EVOTECH runs a New Caney credential job

After the scoping call we survey the site: every reader and controller, the card technology in use (identified with a test reader rather than guessed from the packaging), the reader-to-controller protocol, firmware and software versions, and the current list of administrator accounts. From that we write a phased plan and an itemized quote.

Installation, enrollment and cut-over then follow the migration steps above, timed around your shifts so that a yard crew starting before dawn is not the first to discover a problem. We finish by training whoever will add and remove people, and we leave a short written procedure covering departures, lost cards and temporary access.

What drives the quote, and the errors behind return trips

We quote line by line after the survey. The variables:

• Readers that can be reconfigured versus readers that must be replaced.
• The credential technology you choose, since secure cards and mobile credentials cost more per person than prox.
• Subscription licensing for cloud-hosted software or mobile credentials.
• Controller capacity and firmware, and whether the software needs an upgrade.
• Headcount to enroll, and whether the cut-over happens in one visit or several.
• Yard gate hardware, which lives outdoors and often needs work of its own.

Return trips usually trace back to one of five things: 125 kHz left enabled after the migration; cards ordered without the facility code and range; credentials enrolled to placeholder names; nobody at the business trained to revoke access; or an exterior reader’s wiring left reachable without a tamper switch.

Related services

Frequently asked questions