IIS, CGI environment, Mirroing local administrator to domain Administrator on Domain Controller
am 02.03.2006 08:56:58 von Jim HsuThis is a multi-part message in MIME format.
------=_NextPart_000_000F_01C63E11.F0151F00
Content-Type: text/plain;
charset="big5"
Content-Transfer-Encoding: quoted-printable
Problem description
Environment:
Machine A as a domain controller of MyDomain(Win2003+IIS 6.0)
Machine B as a standalone machine (Win2003)
Machine A and B have the same account name, "Administrator" and their =
passwords are the same.
Scenario:
1. Log on machine B as Local Administrator
2. Use IE in machine B to connect CGI in machine A (CGI enables only =
Integrated Window Authentication)
3. Authentication passed and get user ID as "MyDomain\Administrator" =
from CGI environment variable, "REMOTE_USER", in machine A
Our question is why authentication passed. Will Windows mirror Local =
Administrator to Domain Administrator automatically?
We found that this behavior only happens for native Administrator =
account, not for other new created account.
is this by design?, kind of unexpected to us.=20
------=_NextPart_000_000F_01C63E11.F0151F00
Content-Type: text/html;
charset="big5"
Content-Transfer-Encoding: quoted-printable
Problem=20
description
Environment:
Machine A as a domain =
controller of=20
MyDomain(Win2003+IIS 6.0)
Machine B as a standalone =
machine=20
(Win2003)
Machine A and B have the same =
account=20
name, "Administrator" and their passwords are the same.
size=3D2>Scenario:
1. Log on machine B as Local=20
Administrator
2. Use IE in machine B to =
connect CGI in=20
machine A (CGI enables only Integrated Window Authentication)
3.
color=3D#800000>Authentication=20
passed and get user ID as "MyDomain\Administrator" from CGI environment=20
variable, "REMOTE_USER", in machine A
Our question is why =
authentication passed.=20
Will Windows mirror Local Administrator to Domain Administrator=20
automatically?
We found that this behavior =
only happens=20
for native Administrator account, not for other new created =
account.
is this by design?, kind of =
unexpected to us.=20
------=_NextPart_000_000F_01C63E11.F0151F00--