Windows Forum

Ask something
Discussion Locked

Unknown user access

0 helpful
11 replies

by girishgopi

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have an NT 4 domain network with windows 98 clients. While shutting down some of the 98 clients, a message is appearing on the screen saying that "2 users are currently connected to your machine. Do you want to shutdown?". I would like to know whyis this and how to solve this?

11 replies

by mike (from canada)

you should search for anonymous users. If you see stars, then you know you are going the right way. For example, if you have given the user "ge*" access to your domain, then anyones name that starts with "ge" can get in. Even if someone logged in asgedkrljhlfdhjldj can get in. so apply restrictions.

by still_learning

This also happens as a result of resource sharing (files, printers, folders, etc). Most likely it is the result of a persistent connection. You might want to examine what resources on your computer are defined as shares. You will need to deal with this if you do not want other users accessing your resources. Hope this helps. Good luck.

by curacao_dejavu

It's a normal win98 behavior when dealing with shares. Even when a client loggs off after using the share , win98 doesn't release it, so you can get the behaviour described above.

If possible move the shares to your nt servers since win98 doesn'tprovide real security (no ntfs) and let the users use the nt server shares.

Leopold

by rawright

Use netstat to view your connections to other hosts, and Net Watcher (in Accessories, possibly with a slightly different name in Win98) to view connections to your computer from others on the net. Net Watcher will tell you who is connected, and what shares are open, plus allow to to close the connections, in you wish.

As mentioned elsewhere, there is no security in Win9x, so if you're concerned about these connections, either move the critical resources to a secure platform or unshare them.

by timthetoolman

Hi,

I think its likely to be that a couple of your W98 users around the place have mapped to the problem machines' drives or shares.

The problem probably persists because they had the "reconnect at logon" box checked and now everytime they logon, they'll connect back to those shares...

If you're having dufficulty tracking down the machines doing the connections - I think a couple of the others suggested ways of finding the culprits... then you can always unshare whatever shares they have on the PC and after a few days share them again.

In the meanwhile, hopefully the other users will have got messages like "share not available do you want to connect to it in the future?" and hopefully they'll say no.

Of course if they persist, then you may have a real security issue...

Hope this helps,
Cheers,
Tim.

This discussion is closed to new replies.