Re: Non-administrator has full admin rights !!!

From: GertJan (mustng68@nettaxiNOSPAM.com)
Date: 04/24/02 

From: GertJan <mustng68@nettaxiNOSPAM.com>
Date: Wed, 24 Apr 2002 21:55:48 +0200

Chris wrote:

> I have a NT4 domain based network with some Win2K servers added as
> well as Win2KPro client workstations. I have locked down security on
> the root directories of each server to only Administrator and/or
> Domain Administrator. Any attempt to access \\servername\c$ on any
> server from a client workstation produces an authorization prompt (as
> expected).
>
> Here is my problem: I have recently purchased a new workstation and
> installed a fresh Win2KPro setup plus various company applications. I
> have not yet joined the domain (WORKGROUP member). However, while
> logged in as local administrator on this machine, I can access any
> Win2K system (server or client) thru \\servername\c$ with FULL ACCESS
> PERMISSIONS!! This should not happen...I should be prompted to
> authenticate as above.
>
> NOTE: I do get a prompt if I try to access any of the NT4 servers (??)
>
> I checked and rechecked my permissions on the servers. I then tested
> client access to \\servername\c$. I get authorization prompt...good!
> I then tested from a test machine (domain member, logged in as local
> administrator). I get authorization prompt...good! Finally, I
> removed the test machine from the domain (WORKGROUP member) and tried
> again. I still get prompted...good!
>
> So can anyone explain this (or duplicate it?) Anything I should
> recheck or look out for?

Probably your local Administrator and Domain Administrator password are the
same, they shouldn't be the same anyway for better security. 

-- 

    GertJan

Relevant Pages

  • Re: I need Job Blobb
    ... > Windows and Network administratation. ... > In a job I would like to administrate servers, ... > Title: ISP Network Administrator ... > o Building, installation, configuration and tuning ...
    (microsoft.public.cert.exam.mcse)
  • Re: I need Job Blobb
    ... > Windows and Network administratation. ... > In a job I would like to administrate servers, ... > Title: ISP Network Administrator ... > o Building, installation, configuration and tuning ...
    (microsoft.public.cert.exam.mcse)
  • Re: Big Windows Security Problem
    ... a security problem, unless you have certain security requirements that this ... You could also create an ipsec policy. ... > servers you could configure them to require ipsec security. ... >>>administrator, it allows them to access shares on our ...
    (microsoft.public.win2000.security)
  • Re: I need Job Blobb
    ... >> In a job I would like to administrate servers, ... >> Title: System/Network Administrator, Operations ... >> o Building, installation, configuration and tuning ... >> o 5.5 years of expert-level user/admin experience ...
    (microsoft.public.cert.exam.mcse)
  • RE: Permissions
    ... >servers are available to service the logon request. ... >database does not have the proper domain registrations ... >If you are logged on as an administrator at a Domain ...
    (microsoft.public.win2000.security)