TIP: Click on subject to list as thread! ANSI
echo: win32
to: CHRIS HOLTEN
from: FRANK RAMSEY
date: 1997-11-20 22:10:00
subject: Re: Combo WinNT Server & Workstation

 FR> Even if the userid's are the same, a domain account and 
 FR> a local account use different security identifiers. 
 FR> Without some type of privs, or modifications to the 
 FR> workstation's permissions, and assuming you're using 
 FR> roaming profiles, not mandatory ones, the doman account 
 FR> and local account will not share the same profile. 
 FR> Basically, if a DC is not available, you're hosed until it comes up.
 CH> Hmm...It doesn't -seem- to happen this way on my setup 
 CH> Frank. As you mention, I have the same local user and 
 CH> domain account, but when I log in I log into the domain, 
 CH> not the local account. If the DC is down, I get a message 
 CH> about the domain controller not being available and that 
 CH> the system is using cached settings, which is the desktop 
 CH> I get when I log into the domain (IE chris from 
 CH> CowboyCountry Domain). If I log in using the local account 
 CH> (IE Chris from Old Red) then I get different desktop.  The 
 CH> local user and the domain user are the same name with the 
 CH> same password. S'why I know the user profile (desktop 
 CH> settings) are cached. Don't know how it would work with 
 CH> different passwords or users names that aren't in the 
 CH> local user database. But as described above, that is the 
 CH> way it works here.
When you log into the doamin, you are authenticated to a domain controller. 
If a DC is not available, there is no means of validating the user id and 
password. Hence, you cannot log into the domain.
Since you say you still can log into the domain, I have to ask if the domain 
has both a primary and backup domain controller. If yes, then all domain 
controllers would have to be down for the login to fail.
Even tho the "userid" is the same, a domain and local account have different 
SID's.  The differing SID's is the reason each account has it's own desktop 
... .
framsey@goodyear.com; frank.ramsey@fallsbbs.com;CNA;CNE;MCSE;PE
--- EZPoint V2.2
---------------
* Origin: -- A Point on Pine Lake (330)-796-3146 -- (1:157/603.70)

SOURCE: echomail via exec-pc

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.