Re: unable to access non-trusted resource by default - why?

Sharing the C or any drive drive of a domain controller is a very bad idea,
particularly when giving a user domain administrator access. It is best if a
domain controller not do any function other than being a domain controller.
If that is not possible for some reason then share only the folder that a
user needs access to and then give the user needed access to the shared
folder as a regular domain user and not a domain administrator. If the user
is trying to access from a non trusted domain the user possibly still can
access if the user uses credentials [user account/password] of a user
account in the domain that access is needed in though the user may need to
specify user name as domain\user.

Steve


"seeker01" <seeker01@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:499B84F8-110F-4A79-A19E-85D7DAAFECBA@xxxxxxxxxxxxxxxx
hi there,
How I enable a Windows XP Professional user to access a network
application
from a non-trusted Windows 2000 domain controller is bad, so need to fix
it
ASAP. XP user (from VLAN 1) is a member of a NT4 domain (from VLAN2). For
it
to work today, first I added W2K application server name (from VLAN3) to
host
and lmhost.sam files. Then I do map network drive to the Windows 2000
domain
controller C:\ root drive using the server IP address and domain
administrator password. The network access of both VLAN 1 & VLAN 3 are
fully
opened; VLAN1 & VLAN2 are fully opened; no access between VLAN2 & VLAN3.
Is
there a seamless solution without exposing the root administrator
password?


.

Relevant Pages

  • Desktop Slow to appear After Demoted Domain Controller
    ... I have a Windows 2000 Advanced Server machine that I had originally ... installed as a domain controller for some testing. ... the earlier domain Administrator. ...
    (microsoft.public.win2000.general)
  • Re: Boy, did I screw up some Group Policies!
    ... I've tested deleting groups and I can't find a similar radio button to remove from the list but not really delete... ... Create a new Group Policy for each set of policies you want to enforce. ... I did all this work from the Domain Controller console, ... I didn't expect the Domain Administrator to be in those restricted ...
    (microsoft.public.win2000.group_policy)
  • Re: Setting up new W2K3 School Network
    ... Except for possibly encrypted data, if I can get to your domain controller, I ... Domain administrator passwords must be complex ... You also should implement an account lockout policy that has say a threshold ... You will have to decide on how to deal with those students. ...
    (microsoft.public.win2000.security)
  • Boy, did I screw up some Group Policies!
    ... Create a new Group Policy for each set of policies you want to enforce. ... I did all this work from the Domain Controller console, ... I didn't expect the Domain Administrator to be in those restricted ...
    (microsoft.public.win2000.group_policy)
  • Re: Win98 user acct cant connect - admin acct can
    ... reset the password on the domain controller for the account that will log in ... >>If the administrator is the Domain Administrator, ... >>for a bad key on the keyboard. ...
    (microsoft.public.windows.server.networking)