Security between two domains

  • Thread starter Thread starter Roger Marchant
  • Start date Start date
R

Roger Marchant

I have two domains on our LAN. There is no trust between
them. The administrator has the same password on both
domains. How is it that the administrator on one domain
can see everything in the other domain? I have removed
the 'Everyone' permission from the shares.

I thought that they would be effectively two totally
different users and with no trusts set up, neither should
be able to see into the other's domain.
 
If they are both in the same forest the first machine's
administrator is the enterprise admin. It has admin right
to all other domains in forest!
 
That is the way Windows authentication works. Some consider it a curse and
others a convenience. I can do the same with my laptop that is in its own
workgroup - access shares in the domain by logging into it with the
administrator account and password. --- Steve
 
Back
Top