Re: Big Windows Security Problem

From: Tigran Arabadjyan (arabadj@nospam.am)
Date: 01/09/03 

From: "Tigran Arabadjyan" <arabadj@nospam.am>
Date: Thu, 9 Jan 2003 13:02:56 +0400

Hi,

Strange!!!?

As I know this is possible only in case of the same user credentials
(username/password combination). Have you checked the local administrator
account password on your file server? Is it possible that the password is
blank? Try to reset the local admin password to a new one and try again to
connect.

Please, let me know the results 

---
Tigran.
"Robert Brandon" <robrandon@yahoo.com> wrote in message
news:171001c2b72f$f90bef10$d7f82ecf@TK2MSFTNGXA14...
Have just experienced similar problem.  It seems a
workgroup computer can access a domain resource by using a
valid domain user account.  It doesn't need to be a member
of the domain.  How do you get around this?  If you have
already solved it, please let me know.
Thanks.
>-----Original Message-----
>We are having a problem that has just showed up, at least
>it is the first we have noticed it.  If a outside
>consultant brings in their own computer and hooks into
our
>network and then logs onto their Local workstation as a
>administrator, it allows them to access shares on our
>files servers as a administrator.  Usually from what i
>have been able to notice their computers are in a
>workgroup and not a domain.  I thought maybe it was the
>administrator account that was doing it so i renamed it.
>It stopped then getting in as a administrator but when
>they try now it comes up with a ID and password box, if
>they put in a Valid ID and no password it still lets them
>in.  I don't know how to fix it.  All of our servers are
>running Windows 2000 with SP3 i also did hotfixes after
>that.  Still have the same problem.  We require strong
>passwords on all of our accounts if that matters and they
>have to be at least 10 chars.
>
>Please help!!!
>
>Thanks
>.
>

Relevant Pages
Quantcast