Re: Another hand for Microsoft - Clap Clap Clap

Tech-Archive recommends: Fix windows errors by optimizing your registry

I should have been more exact but thanks for pointing out the mistake. No
in Windows 2000 we can sign in as a Domain User even though there is a
Network drive there with Admin share. You will be queried for the admin
password to connect. Enter that and the Domain user has acccess to the
Network drive. This is not working in Windows ME. Even though I used a
Admin account to connect to the Network drive when I am in the Domain User's
account no password on earth allows the connection. This is not true in
Windows 2000\XP.

--

George Hester
_________________________________
"Kerry Brown" <kerry@xxxxxxxxxxxxxxxxxxx*a*m> wrote in message
news:OKkh10u6FHA.2364@xxxxxxxxxxxxxxxxxxxxxxx
> George
>
> I don't know what you are on about. Bruce is right elsewhere in this
thread.
> Administrative shares can only be accessed by admins by design. I was in a
> hurry with my last answer and didn't fully explain myself. Administrative
> shares cannot be easily modified. I think you may be confusing
> administrative shares with "hidden" shares. Adding a $ onto the end of any
> share name will hide it from a casual observer. This is not the same as an
> administrative share. Why you would want to share the C: drive on a domain
> controller is beyond me. It is very poor practice and not recommended
> anywhere that I have seen. If you did want to do this you would have to
> alter many things, the default domain controller policy, add a new share,
> possibly hide the share with the $, reset the NTFS permissions for the
whole
> drive. There is a reason this is hard to do. It is a major security risk.
If
> you are just experimenting with a home network then have at it. If it is a
> business network then you are crazy to do this.
>
> Kerry
>
> "George Hester" <hesterloli@xxxxxxxxxxx> wrote in message
> news:e%23Ydb3s6FHA.736@xxxxxxxxxxxxxxxxxxxxxxx
> > Yes and definitely won't do that. Oh well another Clap Clap Clap.
> >
> > --
> >
> > George Hester
> > _________________________________
> > "Kerry Brown" <kerry@xxxxxxxxxxxxxxxxxxx*a*m> wrote in message
> > news:#$FjwRi6FHA.3544@xxxxxxxxxxxxxxxxxxxxxxx
> >> "George Hester" <hesterloli@xxxxxxxxxxx> wrote in message
> >> news:u10hEGi6FHA.3636@xxxxxxxxxxxxxxxxxxxxxxx
> >> > Hi Kerry. There is no share. It is not necessary. Or maybe I
should
> > say
> >> > it is not spposed to be necessary. Because C$ is the native admin
> > share,
> >> > it
> >> > is not necessary to set Share on the C drive in the computer I want
to
> >> > access.
> >> >
> >> > Windows ME has the option to set up a Network drive. So say the
other
> >> > machine is called hester. Thus the Network drive would be
\\hester\c$
> >> >
> >> > Not working. Works fine when I log in using Windows ME with an admin
> >> > account
> >> > in the domain but not a Domain User account.
> >> >
> >> > Been bouncing around with Group policy but nothing yet has worked.
> > Still
> >> > keep getting this Network password prompt with no User request
connect
> > as.
> >> >
> >> > In answer to your questions:
> >> >
> >> > 1) Windows 2000 Advanced Server SP4
> >> > 2) Yes
> >> >
> >> > But it really doesn't matter here. The same is true for the client
> >> > Windows
> >> > XP SP2 caanot set a Network drive using the default admin share to
that
> >> > either in ME.
> >> >
> >>
> >> I don't have time to find the relevant documentation but I believe that
> > the
> >> default is that only domain admins have access to administrative shares
> >> on
> >> domain controllers. I don't know if this is part of the domain
controller
> >> default policy or not but the behaviour is expected. To get around it I
> >> think you would have to create an explicit share and then modify the
NTFS
> >> permissions for the whole C: drive, not a recommended course of action
> >> for
> > a
> >> DC.
> >>
> >> Kerry
> >>
> >>
> >
>
>

.

Relevant Pages

  • Re: Another hand for Microsoft - Clap Clap Clap
    ... Administrative shares can only be accessed by admins by design. ... >>> Windows ME has the option to set up a Network drive. ... Works fine when I log in using Windows ME with an admin ... I don't know if this is part of the domain controller ...
    (microsoft.public.windowsxp.general)
  • Re: Security Breach in AD! Help!
    ... > about 5 minutes the user was removed from the built in admin group. ... > changed the default domain policy, the default domain controller policy, ... >> auditing of account logon for success and failure and account management ... >> success and failure in Domain Controller Security Policy. ...
    (microsoft.public.win2000.security)
  • Re: Security Breach in AD! Help!
    ... For the domain check the membership of the administrators group, ... on every user account in any of those ... success and failure in Domain Controller Security Policy. ... admin credentials on. ...
    (microsoft.public.win2000.security)
  • Re: Grant Administrative Access to a Domain Controller
    ... the dc within the Domain Controller Security Policy. ... to domain controllers to restart services, ... (you are doing all of this while logged in as an Domain Admin) ... Create an account and allow them full ...
    (microsoft.public.windows.server.active_directory)
  • Re: More than one Administrator Account and Reinstalling OS on a D
    ... The other roles you describe (Enter Admin, Domain Admin etc) do exist, but ... First to deal with the administrator question, ... > administrator account (the one that you can't remove from the administrators ... When you remove an existing Domain Controller within Active Directory, ...
    (microsoft.public.win2000.active_directory)