Net Session DC to XP client

[Bruce]

One of our Domain Controllers periodically opens a Net
Session connection to one of our xp clients.

Different subnets.

When we did a host to host blocking from the domain
controller to his pc (blocking done on the cisco router)
It disconnected everyone on all subnets to the subnet that
his pc is on.

Any clues?

 

[Brian Oakes [MSFT]]

Honestly It sounds like the access control list in the router was wrong.

A reason a DC would talk to a XP/W2K/NT system is to reset the machine
account password. Hopefully an AD guy can join in and add some value here. I
think the time is every 7 days to reset it. I would double check the acl on
the router, it's pretty easy to get the syntax wrong. I always double and
triple check myself (as I have goofed it up in the past)
--

Brian Oakes

This posting is provided "AS IS" with no warranties and confers no rights.
Please reply to the newsgroup so that others may benefit.