Computer Hope

Microsoft => Microsoft Windows => Windows Server => Topic started by: ksbsantoshkumar on March 26, 2012, 01:38:59 AM

Title: Active directory users access anonymously without any prompt
Post by: ksbsantoshkumar on March 26, 2012, 01:38:59 AM

Computers under domain are able to access each other's computer without any password prompt through shared folders. All the users are having non-admin rights. I have also checked credential manager for any stored password.
I want every time if a system tries to access other's it should prompt for username/password. Nothing is working for me. Can anyone help me to resolve this issue.

Title: Re: Active directory users access anonymously without any prompt
Post by: Rob Pomeroy on March 26, 2012, 06:53:14 AM

Sounds like all users are set up as local administrators on every machine - or worse, as domain administrators.  Check group membership in AD.

Title: Re: Active directory users access anonymously without any prompt
Post by: ksbsantoshkumar on March 26, 2012, 10:43:58 PM

All the systems are under normal domain user group, no local or no domain admin accounts are there.

Title: Re: Active directory users access anonymously without any prompt
Post by: Rob Pomeroy on March 27, 2012, 09:24:06 AM

How are the shared folders set up?  Guest access allowed?

Title: Re: Active directory users access anonymously without any prompt
Post by: ksbsantoshkumar on March 27, 2012, 10:34:31 PM

My point is system is accessible whether shared folder is there or not. It should not be accessible by other system.

Title: Re: Active directory users access anonymously without any prompt
Post by: Rob Pomeroy on March 28, 2012, 07:18:29 AM

When you browse to another computer, what shares do you see listed?  None?  Or some?

Title: Re: Active directory users access anonymously without any prompt
Post by: ksbsantoshkumar on March 28, 2012, 10:31:13 PM

All machines are showing.

Title: Re: Active directory users access anonymously without any prompt
Post by: Rob Pomeroy on March 29, 2012, 01:04:39 AM

Yes, but when you browse to the machine, what SHARES are showing?

Title: Re: Active directory users access anonymously without any prompt
Post by: ksbsantoshkumar on March 29, 2012, 01:14:18 AM

Where I share data it shows and able to access the data, where I don't share there also its able to access the system but not the data.

Title: Re: Active directory users access anonymously without any prompt
Post by: Rob Pomeroy on March 29, 2012, 03:30:53 AM

In that case, it's working as intended.  You can't simultaneously hide the presence of the devices on the network AND make them available for password-based access.  By "able to access the system" I presume you mean that you can "see" the computer, but not actually do anything else with it.

Title: Re: Active directory users access anonymously without any prompt
Post by: ksbsantoshkumar on March 29, 2012, 03:36:19 AM

I want this password-based access only. Could you please help me to do this.

Title: Re: Active directory users access anonymously without any prompt
Post by: Rob Pomeroy on March 29, 2012, 06:11:49 AM

Quote from: Rob Pomeroy on March 29, 2012, 03:30:53 AM

By "able to access the system" I presume you mean that you can "see" the computer, but not actually do anything else with it.

Am I right?

Title: Re: Active directory users access anonymously without any prompt
Post by: ksbsantoshkumar on March 29, 2012, 06:27:45 AM

Ya, you are.

Title: Re: Active directory users access anonymously without any prompt
Post by: Rob Pomeroy on April 16, 2012, 03:37:53 AM

Then you have password-based access.  This is the way it's supposed to work.  It is hard for a user to connect to a machine that is invisible on the network, with or without a password...