Non-administrator has full admin rights !!!

From: Chris (cmoore@us.mutek.com)
Date: 04/24/02 

From: cmoore@us.mutek.com (Chris)
Date: 24 Apr 2002 11:33:46 -0700

I have a NT4 domain based network with some Win2K servers added as
well as Win2KPro client workstations. I have locked down security on
the root directories of each server to only Administrator and/or
Domain Administrator. Any attempt to access \\servername\c$ on any
server from a client workstation produces an authorization prompt (as
expected).

Here is my problem: I have recently purchased a new workstation and
installed a fresh Win2KPro setup plus various company applications. I
have not yet joined the domain (WORKGROUP member). However, while
logged in as local administrator on this machine, I can access any
Win2K system (server or client) thru \\servername\c$ with FULL ACCESS
PERMISSIONS!! This should not happen...I should be prompted to
authenticate as above.

NOTE: I do get a prompt if I try to access any of the NT4 servers (??)

I checked and rechecked my permissions on the servers. I then tested
client access to \\servername\c$. I get authorization prompt...good!
I then tested from a test machine (domain member, logged in as local
administrator). I get authorization prompt...good! Finally, I
removed the test machine from the domain (WORKGROUP member) and tried
again. I still get prompted...good!

So can anyone explain this (or duplicate it?) Anything I should
recheck or look out for?

Thanks in advance!

...
Chris

Relevant Pages

  • Re: Non-administrator has full admin rights !!!
    ... > well as Win2KPro client workstations. ... > the root directories of each server to only Administrator and/or ... I do get a prompt if I try to access any of the NT4 servers ... they shouldn't be the same anyway for better security. ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: Non-administrator has full admin rights !!!
    ... > well as Win2KPro client workstations. ... I have locked down security on ... > the root directories of each server to only Administrator and/or ... I do get a prompt if I try to access any of the NT4 servers ...
    (comp.os.ms-windows.nt.admin.security)
  • RE: How does SBS work with other servers?
    ... SBS2K will function fine with other Windows servers in the domain, ... that none of the servers being added are SBS servers. ...
    (microsoft.public.windows.server.sbs)
  • Re: Sbs 2003 logon speed
    ... All workstations are set for dhcp for the address and dns ... ipconfig /all confirms they have only on dns ... >what are your client workstations current DNS servers. ...
    (microsoft.public.windows.server.sbs)
  • Re: I need Job Blobb
    ... > Windows and Network administratation. ... > In a job I would like to administrate servers, ... > Title: ISP Network Administrator ... > o Building, installation, configuration and tuning ...
    (microsoft.public.cert.exam.mcse)