Sharing Permission

[Guest]

Hi,

My network consist of windows 2000 server hosted as domain controller and
windows XP as clients. In that few users work in .net. Since they need to
access the IIS, i have given them admin rights for the local machine and i
have implemented restrictions for those users using group policy. I found
that those users are able to access network admin shares of other machines in
the neighbourhood such as C$, D$ easily without any authentication..... I
dont know how this is possible and i am sure that their password is different
from admin password.

What i need is, i should be able to access the admin rights and those
users should not be able to access and if they try, they should be asked for
username and password.....

please help me to solve this issue

Thanks in advance

Venkat

 

[Pegasus \(MVP\)]

Hi,

My network consist of windows 2000 server hosted as domain controller and
windows XP as clients. In that few users work in .net. Since they need to
access the IIS, i have given them admin rights for the local machine and i
have implemented restrictions for those users using group policy. I found
that those users are able to access network admin shares of other machines in
the neighbourhood such as C$, D$ easily without any authentication..... I
dont know how this is possible and i am sure that their password is different
from admin password.

What i need is, i should be able to access the admin rights and those
users should not be able to access and if they try, they should be asked for
username and password.....

please help me to solve this issue

Thanks in advance

Venkat

Here are a couple of possible causes:
- The users are domain admins, not local admins.
- The users have local admin accounts on other machines too.

When you say "without authentication" then you probably
mean "without further authentication". Surely they have to
authenticate themselves when they log on!

 

[Guest]

Hi,

I checked and i am sure that those users are not in domain admins group.
Their domain account points to a " security group - global ". I check for
workstations and i found that workstations does not have any logins except
administrator account. I enquired one of the user and he said that until
yesterday when he access another machine is network it will ask for password.
But today it is not asking for authentication.

I just need windows to ask for username and password when they access
another machine in network..... is there any solution for this ?

 

[Guest]

Hi,

I checked and found that those users are not in Domain Admins group. They
belong to "security group - global ". Now let me cut short things. I need
users to provide a username and password if they need to access another
machine in network. How should i enable this ? please give me a solution......

Regards
Venkat

 

[Kurt]

"Security group-global" is not a group, it is a type of group. What domain
groups are they members of?

...kurt