Mark Minasi's Tech Forum
Register Calendar Latest Topics
 
 
 


Reply
  Author   Comment  
charlesnm

New Friend (or an Old Friend who Built a New Account)
Registered:
Posts: 39
Reply with quote  #1 
Users are able to access Domain Controls, but are not in any groups to access Domain Controls or Servers.

Any ideals on how this can be done?



Regards,

Charles 

0
cj_berlin

Avatar / Picture

Senior Member
Registered:
Posts: 298
Reply with quote  #2 
Hi,

what are "domain controls"? Do you mean "domain controllers"? Whar kind of access are the user allowed? Any authenticated user can access the SYSVOL and NETLOGON share but to have users without admin rights logon interactively on a DC, you need to explicitly allow it. Default Domain Controller Policy would be where I'd start looking.

__________________
Evgenij Smirnov

My personal blog (German): http://www.it-pro-berlin.de/
My stuff on PSGallery: https://www.powershellgallery.com/profiles/it-pro-berlin.de/
0
jsclmedave

Administrator
Registered:
Posts: 461
Reply with quote  #3 
Quote:
Originally Posted by cj_berlin
Hi,

what are "domain controls"? Do you mean "domain controllers"? Whar kind of access are the user allowed? Any authenticated user can access the SYSVOL and NETLOGON share but to have users without admin rights logon interactively on a DC, you need to explicitly allow it. Default Domain Controller Policy would be where I'd start looking.


Yeah what CJ said...  Are they able to Remote into these devices or RDP to them?

What do you mean by "have access"..?

__________________
Tim Bolton @jsclmedave
Email: [string](0..20|%{[char][int](32+('527377347976847978324785847679797514357977').substring(($_*2),2))}) -replace ' '  

New to the forum? Please Read this
0
charlesnm

New Friend (or an Old Friend who Built a New Account)
Registered:
Posts: 39
Reply with quote  #4 
I guess what I mean more is than the Domain Control is all servers were able to access under non admin account.  I think it has to do with nested shares in our network.  I just need to resarch were these nested shares are.
0
Previous Topic | Next Topic
Print
Reply

Quick Navigation:

Easily create a Forum Website with Website Toolbox.