IIS, CGI environment, Mirroing local administrator to domain Administrator on Domain Controller

IIS, CGI environment, Mirroing local administrator to domain Administrator on Domain Controller

am 02.03.2006 08:56:58 von Jim Hsu

This is a multi-part message in MIME format.

------=_NextPart_000_000F_01C63E11.F0151F00
Content-Type: text/plain;
charset="big5"
Content-Transfer-Encoding: quoted-printable

Problem description

Environment:

Machine A as a domain controller of MyDomain(Win2003+IIS 6.0)

Machine B as a standalone machine (Win2003)

Machine A and B have the same account name, "Administrator" and their =
passwords are the same.

Scenario:

1. Log on machine B as Local Administrator

2. Use IE in machine B to connect CGI in machine A (CGI enables only =
Integrated Window Authentication)

3. Authentication passed and get user ID as "MyDomain\Administrator" =
from CGI environment variable, "REMOTE_USER", in machine A

Our question is why authentication passed. Will Windows mirror Local =
Administrator to Domain Administrator automatically?

We found that this behavior only happens for native Administrator =
account, not for other new created account.

is this by design?, kind of unexpected to us.=20



------=_NextPart_000_000F_01C63E11.F0151F00
Content-Type: text/html;
charset="big5"
Content-Transfer-Encoding: quoted-printable









Problem=20
description


Environment:


Machine A as a domain =
controller of=20
MyDomain(Win2003+IIS 6.0)


Machine B as a standalone =
machine=20
(Win2003)


Machine A and B have the same =
account=20
name, "Administrator" and their passwords are the same.


size=3D2>Scenario:


1. Log on machine B as Local=20
Administrator


2. Use IE in machine B to =
connect CGI in=20
machine A (CGI enables only Integrated Window Authentication)


3. color=3D#800000>Authentication=20
passed and get user ID as "MyDomain\Administrator" from CGI environment=20
variable, "REMOTE_USER", in machine A


Our question is why =
authentication passed.=20
Will Windows mirror Local Administrator to Domain Administrator=20
automatically?


We found that this behavior =
only happens=20
for native Administrator account, not for other new created =
account.


is this by design?, kind of =
unexpected to us.=20


 



------=_NextPart_000_000F_01C63E11.F0151F00--