Re: security hole? any user can add a computer to the domain??

From: Michael Howard [MS] (mikehow@online.microsoft.com)
Date: 07/02/02 

From: "Michael Howard [MS]" <mikehow@online.microsoft.com>
Date: Tue, 2 Jul 2002 14:40:47 -0700

this is the default in win2000 domains - you should tweak the domain policy
to tighten this up if you require. 

--
Cheers, MH
This posting is provided "AS IS" with no warranties, and confers no rights.
Writing Secure Code - http://www.microsoft.com/MSPress/books/5612.asp
"mat" <MAT_DEWOLFE@SHI.COM> wrote in message
news:1239101c2220b$45169e10$9ee62ecf@tkmsftngxa05...
> We've been having a problem where any user can add their
> computer to our domain without rights to do so.
> this can be accomplished by first renaming the workgroup
> to our domain name but keeping it a workgroup. then, they
> reboot and when they change the name of their computer and
> try to add it to the domain, they can without a problem.
> This works everytime with every user. Can't seem to find a
> fix for it..anyone have any ideas?
>
> thanks in advance.

Relevant Pages