UAC Affects Local Account Access of Remote Shares

-

i came across odd manifestation of uac today. it's been long time since i've had set cifs shares using local accounts authentication, having had domain-joined computers, that's had set today for file sync involving servers from untrusted domains. 

i created local accounts on remote windows 2003 server, remote windows 2008 r2 server, , windows 2008 r2 server logged on to, , added account administrators group on each machine.  each account of course had same name , password.  on each remote server created share on administrators had full control , users had read access. 

i logged on local machine account created , access share on each remote server without being prompted credentials.  write share on remote windows 2003 server, on remote windows 2008 r2 server allowed read access.  logged on local machine domain account in administrators group on remote windows 2008 r2 server , able write share.  once turned off uac on remote windows 2008 r2 server, i was able write share using local account.

has else come across this?  i can't find any documentation it.  why local account affected uac when accessing data on network, not domain account?  access a file system remotely to around uac.

any answers great, watch out if need use local account file sharing model.  see no way around other by disabling uac.

hi,

i sorry delay.

i have done more research, , found out behavior facing called uac remote restrictions.

“when user member of local administrators group on target remote computer establishes remote administrative connection using net use * \\remotecomputer\share$ command, example, not connect full administrator”, quoted kb below:

description of user account control , remote restrictions in windows vista

http://support.microsoft.com/kb/951016

you right disabling uac take away these restrictions.

more information you:

disabling user account control (uac) on windows server

http://support.microsoft.com/kb/2526083

i hope helps.

have nice day!

amy




Windows Server  >  Security



Comments

Post a Comment

Popular posts from this blog

CRL Revocation always failed

-
hi all, i try configure radius server nps, somehow certificate authentication client failed with reason: reason = revocation function unable check revocation because revocation server offline. then check certificate client, certutil -f -urlfetch -verify client7.cer, result follow: issuer:     cn=entca     dc=intra     dc=domain     dc=co     dc=sg subject:     cn=computer.intra.domain.co.sg cert serial number: 1c5b00de000000000041 dwflags = ca_verify_flags_allow_untrusted_root (0x1) dwflags = ca_verify_flags_ignore_offline (0x2) dwflags = ca_verify_flags_full_chain_revocation (0x8) dwflags = ca_verify_flags_console_trace (0x20000000) dwflags = ca_verify_flags_dump_chain (0x40000000) chainflags = cert_chain_revocation_check_chain (0x20000000) hcce_local_machine cert_chain_policy_base -------- cert_chain_context -------- chaincontext.dwinfostatus = ce...
Read more

Failed to query the results of bpa xpath

-
Image
i have new server installed hyper v, iis , domain services roles on it.  i checking event log , see warning multiple times, idea how rid of it?? failed query results of bpa xpath: microsoft/windows/fileservices:$reports$\*\result.xml:/resultdatabase/result. error: device attached system not functioning., last error: system cannot find path specified.. follow me on twitter <<< levalencia blog <<< hi, similar issue discussed in forum: to rid of warnings: 1. go dashboard 2. click on add roles , features 3. click next "before begin step" 4. select "role based or feature based installation" , click next 5. select given server server pool , click next 6. in server roles step make sure following checked:   file , storage services > file , iscsi services > file server, click next 7.click next through rest of steps , install server role 8. rerun bpa scan described earlier for more information please refer foll...
Read more

RDS 2012 r2 collections show black screen and then close

-
Image
greetings,   have deployed 2 server 2012 r2 rds session collections (each 2 rdsh servers, , both going through same gateway/broker server), , during testing had no issues, rolled production, our users have been experiencing black screens when attempting log in, , remote desktop window closes (no actual login performed).   seems happen intermittently, , on both collections @ different times.  thought had solved disabling use of udp in rdp clients, wasn't permanent fix.   looking @ event log of 1 of affected servers, there seems event id 36 generated @ every logon attempt following message: an error occurred when transitioning csrconnected in response evcsrinitialized. (errorcode 0x80070102)   after scouring web looking answers, nothing came up.  here appreciated. edit:  apparently can't screenshot attach, located here: http://imgur.com/rlioxpd so, appears have figured out reason (although, i'm still unsure of root cause).  bi...
Read more