Re: File Share Security
From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 05/28/04
- Next message: Steven L Umbach: "Re: File Share Security"
- Previous message: Steven L Umbach: "Re: Where is my "password list?"
- In reply to: Subrahmanya Bhandarkar [MSFT]: "RE: File Share Security"
- Next in thread: Brian: "Re: File Share Security"
- Reply: Brian: "Re: File Share Security"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 27 May 2004 23:38:39 GMT
I have to disagree with that. In a Windows 2000 domain default installation a domain
user can add up to ten workstations to the domain as specified by the user right "add
workstations to the domain" in Domain Controller Security Policy under user rights.
Perhaps you were thinking of user accounts.
In a default installation a user can also log onto their laptop as a local user with
the same logon name/password as their domain account and they will get access to
domain resources that their user account has permissions to UNLESS default security
settings have been changed to enable ipsec reqire policy, smb signing [digitally sign
communications] is required and laptop does not have it configured, or possibly lan
manager authentication level has been increased to a setting not compatible with the
laptop. Only ipsec require policy using default kerberos machine authentication would
be the sure way to bar communications from non domain computers as far as operating
system restrictions. --- Steve
"Subrahmanya Bhandarkar [MSFT]" <v-subrab@online.microsoft.com> wrote in message
news:sfrmf4AREHA.3996@cpmsftngxa10.phx.gbl...
> By Default Adding new computer to the domain only administrator and account
> operator can perform. So Domain users cannot bring just laptop and plug to
> LAN and use the network resource with out administrator permission.
>
>
> Subbu
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
- Next message: Steven L Umbach: "Re: File Share Security"
- Previous message: Steven L Umbach: "Re: Where is my "password list?"
- In reply to: Subrahmanya Bhandarkar [MSFT]: "RE: File Share Security"
- Next in thread: Brian: "Re: File Share Security"
- Reply: Brian: "Re: File Share Security"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|