Why does this work: Windows same local admin username and password, able to access other computer?

Posted by Ankush on Super User See other posts from Super User or by Ankush
Published on 2012-06-20T12:52:43Z Indexed on 2012/06/20 15:18 UTC
Read the original article Hit count: 345

Filed under:

passwords

|

remote-access

|

window

|

username

|

windows-2008r2

I've two machines MachineA and MachineB. Both have two local accounts which have same username . Both accounts are local admin on those machines.

If they have same password, I'm able to access \\MachineA\C$ from MachineB.

But if I change any one password above doesn't work. And it prompts for username and password. Now if I provide MachineA\username and password, it then connects.

Why isn't there a prompt for password when passwords are same? I expected passwords to be hashed with random salt, how does windows know passwords are same and authorize access?

These machines are running Windows Server 2008 R2.

PS. I've created following reg key to enable drive access HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\LocalAccountTokenFilterPolicy to 1

© Super User or respective owner

Related posts about passwords

Fixing /etc/shadow with md5 passwords to sha512 passwords

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I recently upgraded an ubuntu server with many users to a recent version from a version from 2008. The server used to use md5 password hashes (e.g., the shadow passwords began with $1$) and now is configured to use sha512. I'd prefer to keep using sha512, but would like the old users to be able… >>> More
How to securely generate memorable passwords?

as seen on Super User - Search for 'Super User'
Whenever I need new passwords I use some tools to generate those, preferable memorable passwords, but I've been wondering how secure this might actually be. Using The xkcd random number generator is probably pretty bad, cat /dev/random is probably pretty good, but generating memorable passwords seems… >>> More
Gawker Passwords

as seen on Geeks with Blogs - Search for 'Geeks with Blogs'
There has been much news about the hack of the Gawker web sites. There has even been an analysis of the common passwords found. This list is embarrassing in many ways. The most common password was "123456". The second most common password was "password". Much has also been written providing… >>> More
Phishing Ploy Forces Twitter to Reset Passwords

as seen on Internet.com - Search for 'Internet.com'
The microblogging site has reset some Twitter users' passwords after a phishing attack attempted to steal their login information. >>> More
Phishing Ploy Forces Twitter to Reset Passwords

as seen on Internet.com - Search for 'Internet.com'
The microblogging site has reset some Twitter users' passwords after a phishing attack attempted to steal their login information. >>> More

Related posts about remote-access

Subversion Apache Ubuntu - Remote Access?

as seen on Server Fault - Search for 'Server Fault'
Okay, a couple days ago I built a bare bones kit into a machine. I've been running through tutorials to get it to work and right now I've gotten as far as making it available in my lan, hooray! However, I cannot access the repositories remotely. Any machine on the lan can easily access it through… >>> More
routing and remote access service which was unable to start

as seen on Server Fault - Search for 'Server Fault'
Hi.. when I go through the set up in xp pro sp3 to create incoming network connection i get this message, incoming conections depends on routing and remote access serice which was unable to start.. This happens on both of my machines I try it on.. Help Thanks Reed.. >>> More
Remote access to server via service control panel for non-admin user in Windows 2008

as seen on Server Fault - Search for 'Server Fault'
I'm trying to configure my Windows 2008 servers so that my developers can view their status without needing to log on to the box or be an admin. Unfortunately, the permissions set in Windows 2008 for remote non-admin users don't include the ability to enumerate or otherwise query services. This causes… >>> More
Remote access to apache2 server

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi all, I'm trying to test my iPhone application on the device. I have a mac computer which stores my development environment. Right now I can only access PHP files using the http://localhost/PHPFileLocation which does not work when I try to test my app on real device. How do I configure apache2… >>> More
How to develop a remote access tool for BlackBerry

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi I need to develop a remote access too so that our support staff can take control of users' devices and fix problems. I'm not sure where to start. Can anyone please point me in the right direction? Thanks >>> More