Re: Domain Security.......
From: Ron Bernier (ronbernier_at_hahahahatds.net)
Date: 10/28/03
- Next message: Ron Bernier: "Re: Administrator account locked out"
- Previous message: Ron Bernier: "Re: How to prohibit file-sharing for members of a Power Users local group"
- In reply to: Jeff: "Domain Security......."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 28 Oct 2003 14:02:53 -0500
Your username and password when accessing forest B objects will have
separate rights from your username and password when accessing forest A
objects ... The behavior you are seeing is correct ...
"Jeff" <jeffp@calm.wa.gov.au> wrote in message
news:uB3rVyTnDHA.2528@TK2MSFTNGP12.phx.gbl...
>
> I noticed a strange thing today.
>
> We have to completely separate Windows 2000 forests. I have an account in
> both of them. In forest A, my account has Domain Administrator rights, in
B,
> it has just normal User rights. They both have the same password
>
> Logged into B i tried to access the C$ share of the domain controller in
A.
> Because im logged in using an account with only "user" rights, access
should
> be denied, but guess what......the share appeared and all the files on the
C
> Drive were present. ie Administrator Access
>
> How is this possible?????? Surely Windows authentication analyses the
> account SID when granting permissions and not just the username!
>
> Help!!!!
>
>
- Next message: Ron Bernier: "Re: Administrator account locked out"
- Previous message: Ron Bernier: "Re: How to prohibit file-sharing for members of a Power Users local group"
- In reply to: Jeff: "Domain Security......."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
