Re: Admin shares no longer accessible for users not in domain admins


<Centra@xxxxxxxxxxxxxxxxx> wrote in message
news:eGjLWWgZGHA.4580@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

Quick question, we have removed all users from the administrators/ domain
admin groups for security reasons. However one side affect of this has
been
that we can no longer brows to unc admin shares eg: \\server1\c$ even when
we use the administrator username and password and with the domain prefix
eg: domain\administrator as the user when prompted for an authorised user.

Does anybody know if this is standard behaviour and if it is is there a
way
round it? Or is is down to s Group policy setting that we may have added
in
the past for example?


This is not standard behavior if the Administrator account is not
renamed, disabled, denied/not-granted network logon, and if the
account attempting the mapping does not already have a session
with the same server.

I have to wonder - since you have removed the excessive grant
for security reasons, why are you now trying to defeat a part of
that heightened protection? It would make much more sense to
assess to what it is that Users actually does need access and then
to share that out for the Users.



.

Relevant Pages

  • Admin shares no longer accessible for users not in domain admins
    ... admin groups for security reasons. ... domain\administrator as the user when prompted for an authorised user. ... Does anybody know if this is standard behaviour and if it is is there a way ...
    (microsoft.public.windows.server.security)
  • Admin share not accessible when user removed from domain admins
    ... admin groups for security reasons. ... domain\administrator as the user when prompted for an authorised user. ... Does anybody know if this is standard behaviour and if it is is there a way ...
    (microsoft.public.windows.server.networking)
  • Re: Desktop message when I log on as new user
    ... I'm used to XP Pro and noticed that there's no Administrator account ... For security reasons, I want to create an Administrator account and ... limit the user account, so I created a new user account with ... in Regular Mode in XP Home. ...
    (microsoft.public.windowsxp.basics)
  • Why change Administrator account name
    ... Can anyone give me some pros and cons to changing the Administrator account name? ... Is changing the Administrator account name a common practice for security reasons? ...
    (microsoft.public.win2000.security)