Re: admin rights from computer outside of domain

Bill <Bill@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
correction - this file server is NOT a domain controller, but simply
is a member of our only domain.....if that makes any difference

thanks-
Bill

Then are you absolutely certain it doesn't match the server's local admin
credentials? There's just no way this can happen without it matching
something. I promise.

"Bill" wrote:

yeah, that's what stumps me, there is no logical way for this to
happen.

the administrative shares can't be modified any way that I know
of.....do you know of a way to modify an adminstrative share? and
its not happening just on the D$ share, but also C$ and E$.....



"Lanwench [MVP - Exchange]" wrote:

Bill <Bill@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
Here is an interesting and disturbing problem:

I set up a local pc with xp sp2, logged in as local administrator
with local password. The pc was not yet joined to my domain, but
was connected to our ehternet lan. I went into File manger, and
typed in \\file-server\d$ (our domain controller) it gave me FULL
ADMINISTRATIVE FILE RIGHTS to the file server on XYZ domain. The
pc was not joined to the domain, it was only in the default
workgroup (brand new pc, first time I logged in) The local
administrator password was not the same as my Domain Administrator
password. It did not ask me to log onto the domain, absolutely no
connection, other than they were on the same ethernet network.

Can anyone shed some light on this for me?

thanks Bill

This sounds very interesting indeed - and not possible in any way I
can think of, unless the security ojn your admin share has been
modified to permit EVERYONE or anonymous access (check it out).
Otherwise, the only way your scenario could possibly occur is if
the username and password on the local computer match your domain
admin credentials. There's simply no way for it to happen otherwise.



.

Relevant Pages

  • Re: VPN CReation Wizard Greyed Out
    ... > Network access is OK ... > Remote connection using Citrix Client is OK ... "I am the Administrator with Admin. ...
    (microsoft.public.windowsxp.configuration_manage)
  • Re: admin rights from computer outside of domain
    ... Bill wrote: ... I set up a local pc with xp sp2, logged in as local administrator ... domain, absolutely no connection, other than they were on the ... admin credentials. ...
    (microsoft.public.windows.server.networking)
  • Re: admin rights from computer outside of domain
    ... Then are you absolutely certain it doesn't match the server's local admin ... I set up a local pc with xp sp2, logged in as local administrator ... connection, other than they were on the same ethernet network. ... admin credentials. ...
    (microsoft.public.windows.server.networking)
  • Re: whats the difference between account NAMED administror and a account with admin privilegious?
    ... If you have an account on both machines with the exact same ... I was hoping that being the 'administrator' would cure that problem. ... When logging in....I should select 'admin' ... Bill H. in Chicagoland ...
    (microsoft.public.windows.vista.general)
  • Re: Alternative to Windows Explorer
    ... One drawback if you use that "runas" approach then you really won't know ... Administrator versus their using their actual account. ... admin, a variation of their normal account. ... > pen testing experience in our state of the art hacking lab. ...
    (Security-Basics)