windows 2003 server and why unauthorized users have access

M

mjz_5

2[H]4U
Joined
May 24, 2001
Messages
3,637
I have a 2003 server installed and I have created a network shares with only domain users & domain admins having access to these shares. The thing I find weird is that my two other computers that I have connect to the 2003 server domain have access to the server when they are logged in as the local machine admin.

When I went to run (on workstations with only local admin logged in), and typed: \\servername
I was expecting it to ask me with my username and password, but for some reason, it just lets me in. This never happened to me with windows 2000 server

Any ideas??
 
Is the administrator password on your workstations the same as the server?
 
aug1516 said:
Is the administrator password on your workstations the same as the server?
Click to expand...

lol, i just changed the password on the server and thought i would come here and check if anyone replied.. You did, me test, and now it works...

thats hilarious, go figure, i would have never figured it out...

thanks!!!! but i still don't understand why it would do that.. the admin accounts are on different computers...
 
Because Windows by default will pass along the username and password of the currently logged on user to the server. The security context of the local workstation is meaningless to the server, so the server tries to apply the username and password to a meaningful security context. This feature helps facilitate workgroup networking by eliminating the need to "connect as" to other resources so long as you have identical user names and passwords on each system. Not a particularly secure feature from a domain perspective, but then again, if the username and passwords match it's a pretty fair bet that the person responsbile for both accounts is one and the same.
 
You must log in or register to reply here.
Back
Top