Windows Forum

Ask something
Discussion Locked

Security

0 helpful
5 replies

by qmd61

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have 2 problems on my Network, would you please explaining to me How to fix them:

1. I create a domain with Server running Windows 2000 for Small Business, I have 15 clients PC running Windows 2000 Professional. I just bought a new PC, as soon as I connect this PC to the Hup and boot it up; Although I do not joint this PC to the Domain. I could use Windows Explorer to Browse and see the whole Network but I could only access the share drive of some Clients (not all). This tell me that my network was not setup right and it is not secure at all, any one could plug their desktop to the Hup and then access my Network?I install the DC in Default setup, I have not create any GPO yet.
2. The second problem is happen to all PC in the domain:sometime I could not see all Computer on the Network. For example, if I open Windows Explorer, under my Network place and My Domain name, some time I see all PC and sometime there is nothing under Domain. However, If I could access to the shared drive on any PC by Map it with a drive letter.

I try to reinstall DHCP, DNS but it does not help. I appreciate on any suggestion.

Quan Duong
713-208-1201

5 replies

by timwalsh

Here's the probable answer to your first question.

Did you log onto the computer in question with a user ID and password that is valid for the domain?

If so, you are using what is called pass-through authentication. This will work whether youare joined to the domain or not.

Try creating an account on the computer in question, with a user ID and password that are NOT valid anywhere in the rest of the domain, and then try accessing any domain resources. You should not be able to access anything.

by skersey

1) when you boot up your "rogue" system it is broadcasting an looking for the master browser. the master browser is likely making the list of server on the network able to anyone the asks. If you don't need this (and likely you don't if your usingWINS and/or DNS) then disable the "computer browser" service on all your systems. As for being able to get to some shares, most likely when the shares in question were created, the user did not set as access permissions and they are not using NTFSpermissions. By default when you share a directory everyone group is given permission to the share. Either have the users change this, or start using NTFS to lock-down access, or better yet, use both.

2) This goes back the the master browser. When you are having trouble seeing the list, the master browser may recently gone off-line and a new one has not been elected.

More that likely, neiter DHCP nor DNS is the problem here.

by qmd61

No. It's a DNS problem. I think I do not flush the cache in DNS. It works now after 20 days I reinstall DNS. Thanks for your suggestion.

This discussion is closed to new replies.