Domain Security.......

  • Thread starter Thread starter Jeff
  • Start date Start date
J

Jeff

I noticed a strange thing today.

We have to completely separate Windows 2000 forests. I have an account in
both of them. In forest A, my account has Domain Administrator rights, in B,
it has just normal User rights. They both have the same password

Logged into B i tried to access the C$ share of the domain controller in A.
Because im logged in using an account with only "user" rights, access should
be denied, but guess what......the share appeared and all the files on the C
Drive were present. ie Administrator Access

How is this possible?????? Surely Windows authentication analyses the
account SID when granting permissions and not just the username!

Help!!!!
 
Your username and password when accessing forest B objects will have
separate rights from your username and password when accessing forest A
objects ... The behavior you are seeing is correct ...
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

DCOM error 10017 0
External trust question 1
Cannot set TRUSTED_FOR_DELEGATION flag in userAccountControl for A 2
Multi forest and Citrix farm 1
Pass-through Authentication Between Trusted Domains Not Working 7
Domain Rights 1
Is this possible in Win 2k? 3
Shared folder will be add deny administrators permission 2

Back
Top