Windows Forum

Ask something
Discussion Locked

Not logging into NT Domain

0 helpful
6 replies

by patrick horn

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

It was brought to my attention today that a user at work has full access to our NT domain without logging into the domain, he just logs in using Client for Microsoft Networks. He has access to the network, all the users logged in machines, his e-mail and the internet. We use a proxy server for e-mail and internet access. It has always been my understanding that wighout logging in to the domain, you will not have full access to the network or it's resources. Does this mean that anyone that can gain access to the network has free reign to do whatever they want? Can they go wherever they want and get around any security that is currently set-up? Can they browse the network, have internet access, or worse browse through protected information without being monitored? Any information would be appreciated.

Thanks

6 replies

by timwalsh

What software is the client running? Client for Microsoft Netowrks is what all your computers must use to log in to an NT domain.

If the user is running Win9x, it's possible that his network connections has not been set up to connect to a specific domain. However, as long as he is logging-in with his valid domain credentials, he will be able to access any domain resources.

If the user is using WinNT/2K/XP, it's possible that the options portion if the log-on window is minimized and the domain just isn't showing.

Without providing valid domain credentials (userID and password, no one should be able to access any resources unless the Everyone group has access permissions for a resource. With the Everyone permission, set, while a user may not be able to browse, if they know the UNC path to a resource, they will be able to map it and access it.

Log-on to the domain is not required to access the Internet, nor to access email, if it is hosted elsewhere on the Internet (by an ISP).

Hope this answers your questions.

by patrick horn

We are using Win 98 machines. I guess my question should be, why log into an NT domain? I am on a Win 98 machine that I unchecked in my network settings to log into our specific domain, and I have access to everything I do on a machine I tell to log into our specific domain. What exactally are the benifits of logging into a specific domain? If I have access to our main server, and our proxy server, our proxy controlls our e-mail service and internet connection, then why log in?

by gigelul

Hi,
Login in to an NT domain is necessary:
-one user can use only one or more workstation,
-can access different resources (based on domain permissions),
-without an account can't access network resources/shares, Win9x have a low level of security, but you can force users to logon: http://www.winguides.com/registry/display.php/629/
-is possible to audit user's activity,
-you can implement a policy: http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/win98/Default.asp
-logon scripts
-etc.

A network without any controll is not a network!

This discussion is closed to new replies.