It was brought to my attention today that a user at work has full access to our NT domain without logging into the domain, he just logs in using Client for Microsoft Networks. He has access to the network, all the users logged in machines, his e-mail and the internet. We use a proxy server for e-mail and internet access. It has always been my understanding that wighout logging in to the domain, you will not have full access to the network or it’s resources. Does this mean that anyone that can gain access to the network has free reign to do whatever they want? Can they go wherever they want and get around any security that is currently set-up? Can they browse the network, have internet access, or worse browse through protected information without being monitored? Any information would be appreciated.
Thanks