And what happens when a userforgets their logon password? No problem, they've a list of everyuser's logon name and password hanging on a bulletin board by the coffeemaker. No users can ever change theirpasswords, and their passwords never expire. My client was using this sneaky, defeating method, rather than thesomewhat-preferred "trust thingy." The administrator of these domainscreated each user account in each domain by hand. The trouble here, however, is should the user's password changein either domain then they're out of luck. There is, however, a sneaky, defeating way around this whole "trustthingy." If there's a user in both domains with the same account nameand password, they can bypass the trust business and get onto accessingresources. Additionally, you still need permissions to theprinter in DOMB. So, if you log into the domain called DOMA and want to print to a printer inDOMB, DOMB must trust DOMA. I'd be thetrusted partner because I want the resource.
Youwould be the trusting partner, because you have the resource. You'd trust that I'd spend it onbeer and lottery tickets, not something wacky like Enron or WorldCom stock. If you agree to loan me a twenty,you'd trust me with your money. For example,if I wanted to borrow 100 dollars from you (wait a minute, the stock market isstill down better make it a twenty). Now in the crazy world of Windows NT 4 domains, you have to create a trustrelationship between domains to access resources in other domains. For the math-challenged in the group, that meansthey had five separate domains. The trouble is that you canhave only one PDC per domain. Okay, if you're not aWindows NT person that may seem innocent enough.
They had five servers, eachone acting as a primary domain controller (PDC). Whoever installed the Windows NT servers musthave been the same guy who ran the network cables. The next step of the inspection was to see how the domain was configured.Surely, this couldn't be too bad.it's a relatively small shop. Administrators Guide to Windows 2000 TCP/IP Networks, An
0 kommentar(er)
