Re: Can i run more then one session on the computer?

From: MCSEGURU (mcseguruhere_at_aol.com)
Date: 09/20/05 

Date: Tue, 20 Sep 2005 06:21:20 -0400

You can't. By default, Fast User Switching is administratively disabled by
the OS when you join a domain. MS will not allow this service to run when
in "Domain" mode. The theory is that network connections may be able to be
shared across the different users, using the computer, and this weakens the
client/server security.

However, you can do what I do. Leave your computer's in workgroup mode,
just as long as their workgroup is the exact same name as the domain you
would be joining them to. Ensure all the local passwords on the PC's match
the passwords on the Domain Server, and it works wonderfully. Now I
wouldn't take this solution to the bank just yet. There are risks
associated with this solution. The security between client and server is
weakened with this solution, as the client computer is no longer an Active
Directory object, and therefore does not have the hightened security of a
computer certificate for Kerberos Authentication encryption, and without
that trust, will send usernames and more importantly passwords across the
network much more frequently, however you are never prompted, and if on the
wire security is not a huge issue for you, I would think you could accept
these risks and implement the solution. I myself accept the risk, cause I
don't see how anyone's going to sniff me out. I'd have to let them in the
door first, ya know. The old pysical security vs. data security argument.

As far as the shared network access thing why the service is disabled win
Domain mode, I myself have not seen the network connections security
contexts to be a problem, when my wife uses my computer, she definately
doesn't have access to my porn, I've tried, so maybe MS has another reason
for disabling it. I really don't know.

"Shurick" <Shurick@discussions.microsoft.com> wrote in message
news:E74C501D-4D6D-451A-867D-0C1DE8030EC9@microsoft.com...
> Multiple sessions is pretty feature of XP. In domain environment its not
> working by default. How can i use this feature in domain environment? May
> be
> Vista can help me?

Relevant Pages

  • Re: Can i run more then one session on the computer?
    ... Fast User Switching is administratively disabled by ... The security between client and server is ... I myself have not seen the network connections security ... for disabling it. ...
    (microsoft.public.security)
  • Re: Can i run more then one session on the computer?
    ... Fast User Switching is administratively disabled by ... The security between client and server is ... I myself have not seen the network connections security ... for disabling it. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Can i run more then one session on the computer?
    ... Fast User Switching is administratively disabled by ... The security between client and server is ... I myself have not seen the network connections security ... for disabling it. ...
    (microsoft.public.platformsdk.security)
  • Re: SSL 2.0
    ... this is the classic tradeoff between compatibility and security. ... by default from Windows 2000 Server to Windows 2003 Server. ... may look at the instructions for disabling SSL3 and SSL3.5 and say ...
    (microsoft.public.inetserver.iis.security)
  • Re: lets vote for better security
    ... Liberals and security professionals who occassionally wear a black hat. ... Then MSFT started disabling things by default and a lot of the community ... Since when is an app responsible for the ... :>: default installation and be disable-able by Group Policy. ...
    (microsoft.public.security)