FR>Chris Holten wrote in a message to Steve Quarrella:
FR>CH> administrative shares. You don't have to be a part of a
FR>CH> domain to have access to domain resources.
FR>If the domain guest account is disabled (the default), you must be
FR>part of the domain to access domain resources.
I recently saw our new database wizard do some things that "aren't
possible".  One of them involved getting to a second domain with out a
trust relationship or a user account.  It is a special case, however,
and he is an MCSE who happens to prefer database work to network admin.
If the user has backup rights to an Access or SQL database on one domain
on a network, they can get to that domain from from a different domain
from inside another Access or SQL database that they have backup rights
to.
If he can get to a command prompt on one domain, all resources on the
network are fair game for him too.  Perhaps it doesn't count because he
does need some subset of an admin account, but then there is "Get Admin"
that a lot of administrators have not locked out of their networks.
 * OLX 2.2 * Organizing Libertarians is like herding cats
--- T.A.G. 2.7c Standard
---------------