Re: Why Does WinNT Re-Authenticate Users?

From: Gary Flynn (flynngn@jmu.edu)
Date: 01/22/02

  • Next message: Eric Robinson: "Re: Why Does WinNT Re-Authenticate Users?" 

    Date: Tue, 22 Jan 2002 15:33:07 -0500
From: Gary Flynn <flynngn@jmu.edu>

    "eric[no_spam]"@pmcipa.com wrote:
    >
    > The one-way trust makes it easy for our web team to administer the
    > machines in the DMZ domain. However, I began to wonder if, whenever
    > they connected to resources in the DMZ domain, their credentials were
    > being presented in the DMZ domain.

    There are some resources listed at the bottom of the following
    (out-of-date) page that you might find helpful. Some MS applications
    will send NT credentials, or at least their hash, by default to
    other systems as part of the connection process.

    http://www.jmu.edu/computing/info-security/engineering/issues/desk/windows_passwords.shtml 

    -- 
Gary Flynn
Security Engineer - Technical Services
James Madison University

    Please R.U.N.S.A.F.E.
http://www.jmu.edu/computing/runsafe