Displaying 1 result from an estimated 1 matches for "dcesrv_netr_serv".
2016 Oct 28
1
Disabled account can still connect to domain
Hello,
I receive the following warning in my logs
Account [HP48-PFD$] is disabled
[2016/10/28 14:40:36.973803, 1, pid=1272, effective(0, 0), real(0, 0)]
../source4/rpc_server/netlogon/dcerpc_netlogon.c:382(dcesrv_netr_ServerAuthenticate3)
It appears user accounts behave differently then computer accounts when
disabled. If I disable a user account via. ADUC, the user is not
permitted to log in. If I do the same for a computer account, any user
can still login from that workstation. Are there cached credentials I&...