OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Lloyd Richardson (Lrichardsonmind.ca)
Date: Tue Apr 02 2002 - 11:06:18 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Your IIS server will cache domain credentials for use when domain
    authentication is not available.

    -----Original Message-----
    From: A B [mailto:hadavidiyahoo.com]
    Sent: Monday, April 01, 2002 11:36 PM
    To: focus-mssecurityfocus.com
    Subject: Domain Controller Messup

    Hi

    We recently had an electric fire in our organization
    b'cos of which power had to be turned off for a while.
    This seems to have lead to hardware failure of
    domain controller (DC) of a domain (let's call the
    domain 'test'). The DC shuts down as soon as we
    boot it up. The domain also has a IIS webserver, and
    an exchange server 2000 in the domain.

    Now on the IIS server, we have enabled ftp through
    the domain. Even though the domain controller is
    switched off, the users are still able to be
    authenticated via the domain and use the ftp i.e when
    the user logs on to our ftp server they type in
    test\username and password and it works even
    though the DCis now tunred off and there are no
    backup DC. Since we have an exchange server 2000
    in the domain, all the domain accounts are populated
    on the exchange server too. So we turned off the
    exchange server too and still the users can use the
    ftp using the domain account. Can anyone please
    help me understand how this may be happening?

    TIA
    Naveen.