Crazy EddieCrazy Eddie
Starting to like KiXtart
Registered: 2002-11-20
Posts: 105
Loc: Sacramento, CA USA
Gurus,
Is this a bug or a feature?
When logging onto a workstation that is a member of a domain, using a local cached domain account, the Macro @PRIV returns GUEST, regardless of the real user rights.
This code returns the fact that rights are actually ADMIN, not guest:
code:
$IsAdmin="" SELECT CASE INGROUP("\\@WKSTA\Administrators") = 1 $IsAdmin="Yes" Case 1 $IsAdmin="No" ENDSELECT
So, is this a bug, or a feature? -Crazy Eddie
_________________________
{Insert your favorite Witty Tag Line here}
#34245 - 2002-12-0605:10 PMRe: Bug or Feature: @PRIV
Crazy EddieCrazy Eddie
Starting to like KiXtart
Registered: 2002-11-20
Posts: 105
Loc: Sacramento, CA USA
Version 4.12 (Latest).
It can get the information...it just isn't.
It must be relying on the token that exists, which in this case is a local token...not from a DC.
Your permissions use pass-thru authentication, so your rights are the same as if you interactively logged onto the domain. You are still a local admin, if you {Domain}\userID would be admin locally.
I doubt this really belongs in "starters." Maybe not in BETA...but certainly not here.
-Crazy Eddie
_________________________
{Insert your favorite Witty Tag Line here}
Is the computer connected to the domain when you log in? I suspect that it isn't connected, thus you won't be able to pull information from the domain controller. And @FULLNAME for example is being pulled from the domain controller.
_________________________
There are two types of vessels, submarines and targets.
This is NOT a bug. Most macros are resolved by contacting the authenticating domain controller or KiXtart RPC Server (in case of Windows 9x). since there is no domain controller, those macros cannot be resolved and are thus empty or contain their default value.
The macros are not cached locally.
_________________________
There are two types of vessels, submarines and targets.
hmmm... lserver is returning correct as it is where I'm logging on when in cached data. ldrive is not queried anywhere but there is only added the netlogon after the server which is not 100% sure. from manual:
Nope, since it cannot contact the domain controller to determine your actual domain privileges it goes with a default 'GUEST' privilege. I also suspect that LSERVEr is the local computer's name since that one did perform the authentication.
I don't see anything unusual in the returned macros for a disconnected workstation.
[ 06. December 2002, 17:47: Message edited by: sealeopard ]
_________________________
There are two types of vessels, submarines and targets.
actually, I think it should return admin. but somehow it returns it not.
ldrive is not got anywhere, it's just added to lserver.
what comes to priv, manual does not say it ask from dc, so it is lacking info or it's doing it wrong as this wksta sees me as admin even though not connected.
