OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Brandely, Chris (chris.brandelywestam.com)
Date: Thu Dec 13 2001 - 15:29:36 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    A question:

    Can you then create a user with the old username? If you can, can you then
    delete that new user to prevent logong using that username?

    (I guess that's two questions...)

    Chris Brandely
    WestAM (USA)

    -----Original Message-----
    From: steverfyiowa.com [mailto:steverfyiowa.com]
    Sent: Thursday, December 13, 2001 12:01 PM
    To: focus-mssecurityfocus.com
    Subject: NT4 Phantom user after rename

    We have confirmed that if you rename a user with user manager, you can sign
    in as the original user even though they are no longer listed in the user
    list. The old username even shows up as a successful login in the event
    viewer. We can also login with the new name. The old and new names both
    have access to the same email account on Exchange. The only difference
    between the original name and the renamed name is that you can no longer
    change your password on the original name.

    All domain controllers are NT4.0 SP6a
    Any ideas?

    Thanks,
    Steve Ribble - MCSE, CCSE
    Gazette Communications