NT4 Locking (Was: ole objects in a "secured" environment?)

From: Tadek Knapik (tadekat_private)
Date: Tue Feb 02 1999 - 02:00:04 PST

  • Next message: Don Papp: "DPEC Online Courseware Fix"

    	David Reed wrote:
    
    > background:
    >
    > since all of the major security flaws in windows nt 4.0 have been discovered
    > (who am i kidding? ;-), i'd like to point out a minor one... by way of a
    > question: "should a secured workstation's 'unlock workstation' dialog be
    > permitted to interact with the desktop?"
    
    	Much more interesting thing to me is the way it handles passwords.
    I log on, change my own password with User Manager, and then give it
    ctrl-alt-del combination, choosing Lock Workstation. Surprise, it doesn't
    accept the actual pasword, it needs the old one, used while logging on.
    	Valid with SP3 as well as with SP4.
    	Once upon a time a Microsoft guy (suprised as I was at first:) tried
    to explain this is the way it has to be as the 'Lock Workstation' cannot
    interact with the desktop ;)
    	Sorry, if this was already mentioned/discussed here and I'm just
    taking your time ;)
    	Sincerely,
    
    						Tadek Knapik
    
    --
    ----------------------------------------------------------------------
    |   Tadek Knapik (TxF on #amigapl)    //   "Be yourself, no matter   |
    |   tadekat_private   \X/     what they say" - Sting   |
    ----------------------------------------------------------------------
    | I use an account provided by my employer; however, my employer in  |
    | no way endorses any action or statement of mine, unless stated so. |
    ----------------------------------------------------------------------
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:32:10 PDT