Re: Pass through authentication problem

From: Erik Ableson (Erik.Ableson_at_OZITEM.COM)
Date: 06/28/04

  • Next message: Michael: "Re: Translating security on Server" 
    Date: Mon, 28 Jun 2004 09:51:06 +0200

    Hmm - this is similar to some of the problems I'm currently having. People
    that have shortcuts to resources on the old domain are prompted to
    authenticate even though the following has been set up:

    Bi directional trust
    SID Filtering disabled

    Migrated account accessing a resource in the old domain via a shortcut. The
    bulk of my problems appears to be related to incomplete resolution of rights
    that should be accessible via their SID history.

    Erik

    On 25/06/04 15:44, in article kFqeqprWEHA.304@cpmsftngxa10.phx.gbl, "Bob Qin
    [MSFT]" <bobqin@online.microsoft.com> wrote:

    > It is not same for the domain user account and local user account. For the
    > local user account, the information is saved on each computer individually.
    > Windows 2000/XP will validate user account locally not from the remote
    > computer. It will first check if there is same local user, then if the
    > password is same. If the password is not same, then it will not connect.
    >
    > As for domain user, the information is saved in the AD database and it need
    > to contact DC for authentication, so it is unique in the whole domain.
    >
    > So you can add a local user on the member server and assign same password
    > as on the client.
    >
    > Please refer to the following article.
    >
    > 258938 Network Clients Prompted for Password Connecting to Share on Windows
    > http://support.microsoft.com/?id=258938

  • Next message: Michael: "Re: Translating security on Server"

    Relevant Pages

    • Re: access denied - IS THERE a definitive solution????
      ... accounts were added while part of the domain... ... none of the local user ... The part that's really ticking off, though, is that I DO authenticate ... profile created. ...
      (microsoft.public.win32.programmer.wmi)
    • Re: access denied - IS THERE a definitive solution????
      ... none of the local user ... The part that's really ticking off, though, is that I DO authenticate ... profile created. ... I would test deleting the profile created for the user when in a workgroup, ...
      (microsoft.public.win32.programmer.wmi)
    • Re: Client Certificate not reaching server
      ... Clould you please elobarate. ... > authenticate the local user, not the server, so the private key is needed. ... >> am adding that certificate file to httpwebrequest. ...
      (microsoft.public.dotnet.security)
    • Re: FTP server authentication issue.
      ... you should be able to authenticate locally. ... > user to log on to the ftp site. ... So i created a local user, but the local user is unable to ... >> listing on the security on all folders. ...
      (microsoft.public.inetserver.iis.ftp)
    • Re: I think I may have found a security oversight.
      ... and you have UserA on MachineA ... You may not even see a local user besides Admin, guest, etc. ... When it's trying to access resources on the ... network server, SERVER, it tries to authenticate using the local notebook ...
      (comp.os.ms-windows.nt.admin.security)