It would work in either instance if the Admin name and Password were
Identical.


 
_____________________
Dave Kleiman
[EMAIL PROTECTED]
www.netmedic.net

"High achievement always takes place in the framework of high expectation."
Jack Kinder

 


-----Original Message-----
From: hong li [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, July 02, 2003 10:35
To: [EMAIL PROTECTED]
Subject: Security issue in Windows 2000?

If you use the same password for the local
administrator on workstations 
as all other servers's local administrator, (even
domain administrator),the local administrator can gain
full access to any servers without asking 
domain info if you logon locally using local
administrator account.  You even can map to
\\servername\c$ whihout asking any domain users info.

I recalled this never happenes in NT environment and
it always pops you doamin userinfo when you access any
server in the doamin if you log on locally.  

Is this the security hole in Windows 2000 environment
or something else?

Thanks in advance,

Hong


__________________________________
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com

---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------





---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.

Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.

Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------

Reply via email to