Re: Remote process with network access

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Ivan Brugiolo [MSFT] (ivanbrug_at_online.microsoft.com)
Date: 08/31/04


Date: Tue, 31 Aug 2004 10:02:29 -0700

The machine account will authenticate as the "Null Logon Session" via NTLM,
that is a nice way to say that the machine is not authenticated at all.
If the remote server can be as open as
"allow anybody to authenticate against it with no credentials" then you can
do that.
Please research the consequences of the Null-Session before thinking that
it would be a solution.

-- 
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of any included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"chris delaney" <chrisdelaney@discussions.microsoft.com> wrote in message
news:4138F575-D2F4-4AC5-89A5-85BDF6495CA5@microsoft.com...
> I am trying to initiate a process on a remote computer.  This is a .Net
exe
> and this process will use network file shares.
> I have initiated the process using WMI but when using ntlm it seems the
> process cannot access network resources.  This is consistent with what I
have
> been reading in the forums.  I cannot use Kerberos in our environment.
>
> Any other suggestions ?  can I "open" something up ?
>


Relevant Pages

  • Re: Windows XP Computer Object Password Change Process with AD
    ... Each Windows-based computer maintains a machine account password history ... It will change the password as soon as it try to authenticate against AD, ... Netlogon attempts to set up a secure channel ... reset the computer's account. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Cached credentials and password expiration
    ... I believe that when the machine account is hosed ... > access to a domain controller during the logon process. ... > are connected to the VPN on a very regular basis, ... Doesn't it authenticate the user through AD? ...
    (microsoft.public.windows.server.active_directory)
  • RE: How can you tell if NTLM or NTLMv2 is used to authenticate?
    ... I believe a first directly way is to apply that policy with "Send NTLMv2 ... response only\refuse LM & NTLM" and these applications who use NTLM will ... A second way is to directly ask the manufacture of those applications to ... >are using LM or NTLM to authenticate because if I refuse LM or NTLM ...
    (microsoft.public.windows.server.active_directory)
  • Re: Igor, pAPP toolkit questions
    ... > sure NTLM uses IAuthenticate though. ... My result with this testing was that NTLM seems to also call my Authenticate ... I seem to have different expectations of the Authenticate event. ... presented with the dialog box collecting my username and password. ...
    (microsoft.public.inetsdk.programming.webbrowser_ctl)
  • Remote site BDCs wont auth clients when T1 to AD 2003 is down LTLM?
    ... We did an in place upgrade from NT4 PDC to 2003 Server w/ Mixed/Hybrid Mode ... domain controller is on the same subnet and replication thought-out ... authenticate themselves to an active directory box. ... I have tried forcing the AD controller to do NTLM only- but that ...
    (microsoft.public.security)