[cvsnt] WinXP sspi Admin authentication: Local vs Domain?

Tony Hoyle tmh at nodomain.org
Wed Feb 19 09:32:28 GMT 2003


Glen Starrett wrote:


> If I had to guess, based on what I understand of NT's authentication
> system,
> CVSNT isn't looking at the local groups list.  The token given by an
> authentication server in the DOM domain wouldn't include information on
> the local machine group membership info, but it would include info on the
> DOM domain groups.
> 
cvsnt doesn't look at anything... it asks the system if the account is an
administrator and uses whatever that says (NetUserGetInfo level 1).

Presumably there's a way of setting it so it tells cvsnt you're an
administrator...  If you have an MCSE around they might know the magic
setting.

Tony



More information about the cvsnt mailing list