Re: Security Issue: WSS SP2 allows unauthenticated user to access

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

After some additional testings, I figured out that I'm not getting the login
prompt because I've checked 'Save my password' when I entered the valid user
account for my site.

Where is this credential cached and how do I clear it? I tried Internet
Options -> Content -> AutoComplete -> Clear Passwords, and it did not bring
back the login prompt. Deleting cookies and offline files did not make any
difference either.

--
Thank you,

The Groker


"Mike Walsh" wrote:

> Could it be that you have are accessing the XP machine as Administrator;
> that the password for Administrator for both machines is the same; and that
> your XP machine's IE security settings are it to automatically take for
> login to another machine the same name and password as your login on that XP
> machine.
>
> That would be a scenario where this would happen.
>
> (Own experience with same password for Administrator on different machines
> causing oddities)
>
> Mike Walsh, Helsinki, Finland
> WSS FAQ http://wss.collutions.com
> please reply to the newsgroup only
>
> "The Groker" <TheGroker@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:FB5EEB99-EBAE-40B0-81B8-CEB8BA46A98D@xxxxxxxxxxxxxxxx
> >I have 2 PCs belong to the same Workgroup (no domain controllers). One has
> > Windows 2003 Server with WSS SP2 and the other has Windows XP. The user
> > account on the XP machine has no rights to the SharePoint sites on the
> > Windows 2003 Server machine. However, I can browse to the SharePoint sites
> > from the XP machine by entering the URLs. I never get prompted for
> > username
> > and password.
> >
> > Some additional settings:
> >
> > WSS:
> >
> > Anonymous users can access: Nothing
> > Allow all authenticated users to access site? No
> >
> > IE:
> >
> > Trusted sites zone is empty
> > Check for newer versions of stored pages: Every visit to the page
> >
> > I deleted all offline contents and cookies and still not getting the login
> > prompts.
> >
> > --
> > Thank you,
> >
> > The Groker
>
>
>
.

Relevant Pages

  • Re: PLEASE.....ANY HELP GREATLY APPRECIATED
    ... Administrator account without needing to go through Windows. ... "John John" wrote: ... I wanted to get rid of that annoying login screen on my home computer (which ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Request Help: I lost privileges after changing Network ID to a Workgroup from a domain, even th
    ... Logging in as administrator worked. ... that when you disjoin from a domain you can continue to use the same account ... You probably need to login ... >> I suspect my problem is something basic related to Group Policy but I ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Minimum Password Age GPO
    ... their account to require them to change their password at next login, that if they then login in under 24 hours time they will be prompted to change their password but will not be able to change their password?? ... The "require to change password" box is a different flag that goes with the account. ... The minimum password age settings does not apply to you as the administrator. ...
    (microsoft.public.windows.group_policy)
  • Re: Administrator Account Restrictions
    ... Per user Group Policy Restrictions for XP Home and XP Pro ... >> I have created an account with admin access. ... How do I set the Administrator ... >> Currently I have disabled the multi user login capability so that I can enter ...
    (microsoft.public.windowsxp.security_admin)
  • Re: MSSQL$SBSMONITORING Login to Disabled Account?
    ... hmmm, 3AM is when the monitoring database cleanup happens, how big is your ... Administrator account and I don't understand why this login attempt is ...
    (microsoft.public.windows.server.sbs)