Domain Account Can RDP into Workgroup Computer

Hi,<o:p></o:p>
Domain Accounts are able to RDP into WorkGroup computer which is not part of the domain. The workgroup machine is in AWS.<o:p></o:p>
This happens when the domain username and its password copied as local account in the workgroup computer.  <o:p></o:p>
Domain Name: DName<o:p></o:p>
Name of the computer that is in the workgroup and not in the domain: system1<o:p></o:p>
Domain Account: DName\User1 Pwd: abcd<o:p></o:p>
Local System Account: system1\User1 Pwd: abcd<o:p></o:p>
As long as the domain account and Local System Account have the same name and same password we are able to RPD using the domain account (DName\User1).
If the password is different, this does not work.<o:p></o:p>
After RDP, when i run the whoami command the user shows up as system1\User1.<o:p></o:p>
Any info on why this would happen and how to fix the same will be highly helpful.<o:p></o:p>
Thanks in advance<o:p></o:p>

Hi there,
It sounds like you're still signing in as the local user, not the domain user. Even though you're specifying a domain name, the computer isn't associated with that domain. It will try to log in using the local account name, which as you mentioned, if the
usernames and passwords the same, will work.
Check in computer management to see if you have local users listed in there.
Why not add the computer to the domain?

Similar Messages

  • I have a slow startup or login, with numerious spinning wheels. Sometimes after a long ti,e I can sign into the computer and sometimes it just fails to startup or login. I have a MacBookPro OS X 10.7.5 from 2011

    I have a slow startup or login, with numerious spinning wheels. Sometimes after a long ti,e I can sign into the computer and sometimes it just fails to startup or login. I have a MacBookPro OS X 10.7.5 from 2011. It became more serious recently as I think I might have let my battery run out I also tried to download the operating system to reinstall it but it allways stops around 1.4 GB out of 1.7 then the whell starts again.

    Keep the MBP attached to the power adapter.
    First try SMC and PRAM resets:
    http://support.apple.com/kb/ht3964
    http://support.apple.com/kb/ht1379
    Then try to boot the MBP in recovery (OPTION key down) and select the recover partition.  Select Disk Utility>First Aid and verify and repair the HDD.
    Additional steps can be found here:
    https://discussions.apple.com/docs/DOC-3353
    Ciao.

  • SBS 2011 Domain Accounts Can't Login To Windows 8 PC

    One of our Windows 8.1 machines is no longer allowing domain accounts (except admin) to login to the PC.  This PC was a fresh setup and was joined to the domain in January.  When I log into the PC with the network admin and go to logs I get the
    following message related to group polocies not being able to be applied (now it won't let me connect at all).  I'll upload log files as soon as I can connect again.
    We are running an SBS 2011 server that handles all ad, dns, exchange 2010, remote web access, etc.
    Any ideas on what may be going wrong or how I should troubleshoot the issue?
    Thanks!

    Hi,
    Any update?
    Just checking in to see if the suggestions were helpful. Please let us know if you would like further assistance.
    Best Regards,
    Andy Qi
    TechNet
    Subscriber Support
    If you are TechNet
    Subscription user and have any feedback on our support quality, please send your feedbackhere.
    Andy Qi
    TechNet Community Support

  • Macbook pro retina display doesn't work occasionally. Random restarts. I can remote into the computer when display isn't working correctly

    I have some issue with my 2012 Macbook Pro Retina. The screen intermittently decides to just not work. Sometimes on startup i hear the start up noise but the screen doesn't turn on. I am able to remote into the computer when the screen doesn't work. I can't seem to find any rhyme or reason as to when it works and when it doesn't. I've reset the PRAM and SMC sometimes that will bring the screen back sometimes not.
    Any ideas?

    You can try the Apple Hardware test, not definitive by any means, especially intermittent problems, but it is a start.
    AHT  http://support.apple.com/kb/HT1509
    I think i would take it in for a free  'Apple Service Diagnostics' test
    Genius reservation http://www.apple.com/retail/geniusbar/
    on-line https://getsupport.apple.com/GetproductgroupList.action
    check warranty https://selfsolve.apple.com/agreementWarrantyDynamic.do

  • Standard Account can see into Admin Account!!

    I just set up a Standard account to verify a problem and found, what I think is a serious security problem. While in the new Standard Account, when following the path MacintoshHD/Users/AdminAccountName I could see into the Desktop folder and two other folders I had created at the Home level. Documents, Music, Movies, etc all had the red stop mark on them. Logging into the Admin account and following the same path, but to the Standard Account, I could NOT see into the desktop folder - it had the red marker on it. This is the first time I have set up a standard account in a long time but I don't believe that this behavior was evident before. My system is up to date (1.4.5 and the latest security patches v1.1). Thanks, Will

    Log into the admin account and select one of the folders you were able to see from the standard account; next, choose Get Info from the File menu and set the permissions on that folder to No Access for Group and Others. Mac OS X will show you the contents of a folder if the UNIX file permissions or access control list on it allow you to do so; this is the default for some parts of your home folder. Changing the permissions as described above will stop any account except for you and root from being able to see the contents of those folders; any administrator account can execute commands as root.
    (11191)

  • Cant seem to RDP into Windows computer over VPN

    Hi All,
    I just installed KVpnc and imported a cisco profile (.pcf file) so I can connect to my office network. This worked great and I'm able to connect successfully. The problem I have is I need to RDP into my work machine (running Windows XP) but this doesnt seem to be working.
    I installed 'pacman -S rdesktop) and from the command line when using the following command it just sits there with 'Autoselected keyboard map en-us'
    [root@arch ~]# rdesktop myxpcomputer.company.com
    Autoselected keyboard map en-us
    I tried pinging the machine but that doesnt return ANY lines. Any ideas?
    thanks
    Hardeep

    I don't believe there's a wikipage for it. I'll describe what I can remember from getting this set up originally here; if it turns out to be useful, perhaps I will wiki it up.
    Run pcf2vpnc on your .pcf file; I saved the result to /etc/vpnc/mywork.conf
    % pcf2vpnc mywork.pcf mywork.conf
    At this point, you can test by:
    % sudo /usr/sbin/vpnc /etc/vpnc/mywork.conf
    Depending on how the VPN is configured, this should re-write your resolv.conf with the correct info for DNS lookups, and you should have a new interface (tun0 in the below):
    [2011-01-20 13:41:35 alfheim:/etc/vpnc]
    1083 vpnc % ifconfig
    eth0 Link encap:Ethernet HWaddr 00:22:68:3E:92:76
    inet addr:192.168.1.3 Bcast:192.168.1.255 Mask:255.255.255.0
    inet6 addr: fe80::222:68ff:fe3e:9276/64 Scope:Link
    UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
    RX packets:12896053 errors:0 dropped:0 overruns:0 frame:0
    TX packets:9890866 errors:0 dropped:0 overruns:0 carrier:0
    collisions:0 txqueuelen:1000
    RX bytes:15647485067 (14922.6 Mb) TX bytes:5493157964 (5238.6 Mb)
    Interrupt:40
    tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
    inet addr:10.136.4.244 P-t-P:10.136.4.244 Mask:255.255.255.255
    UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1412 Metric:1
    RX packets:86082 errors:0 dropped:0 overruns:0 frame:0
    TX packets:109796 errors:0 dropped:0 overruns:0 carrier:0
    collisions:0 txqueuelen:500
    RX bytes:32603385 (31.0 Mb) TX bytes:11404448 (10.8 Mb)
    If you can verify that the new interface is created and that some meaningful change has been made to resolv.conf (it isn't pointing to your router or whatever it usually does for the nameserver), then check route to see if tun0 is setup as your default route.
    That should be the basic steps to getting it setup; however, in this setup note that all your traffic will flow over the VPN. Once you can confirm whether the above works or not, I can describe my setup in more detail if you'd like to "separate" your traffic between the VPN (tun0) and your usual network (eth0 interface).

  • Visual Studio Test Controller recovery locks out the user domain account, cannot log into PC

    On the recovery tab of the Visual studio Test controller Services properties dialog, there are three recovery settings:
    First Failure, Second failure and Subsequent failures. The default settings for these options is to "Restart the Service". I changed my domain password this morning, restared the PC and could not log in because the Visual Studio Test Controller
    service tried to restart with the wrong credentials in an infinite loop. This resulted in my account with the domain controller getting locked out. The delay between service restarts was very quick and I could not login and stop the service. The kind admin
    fellow logged in  to the PC and changed the service settings.
    Is there a place where the recovery service restart interval can be changed to prevent this situation?

    Hi bcautest1,
    >>I changed my domain password this morning, restared the PC and could not log in because the Visual Studio Test Controller service tried to restart with the wrong credentials in an infinite loop. This resulted in my account with the domain controller
    getting locked out.
    You said that you couldn't log in, do you mean that you couldn't log in your machine or others?
    If you change the domain password, generally we could open the Test Controller configuration and change the logon account for this service.
    But if you mean that you couldn't log in your windows now, I'm afraid that it is not the test controller and Agent issue, it would be the windows issue, because it still has this issue even if you use other servers.
    Reference:
    https://technet.microsoft.com/en-us/library/cc773155(v=ws.10).aspx
    Like the following documents here:
    http://stackoverflow.com/questions/4468677/domain-account-keeping-locking-out-with-correct-password-every-few-minutes
    Maybe the Window support forum would be better for you:
    https://social.technet.microsoft.com/Forums/windows/en-US/home?forum=w7itprosecurity
    If I misunderstood this issue, please feel free to let me know.
    Best Regards,
    Jack 
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • People can break into my computer by restating it

    i logged out of my mac and at the bottom of the login screen it says sleep, restart, and shut down. i accedentaly selected restart. the computer restarted like normal except when it was done it opened up my user! it didnt ask for my password or anything.This makes it too easy to break into a computer. i was wondering if this happens on all computers and if there is a way to make the login screen come up after a restart or ask for a password.
    any help is appreciated!

    Open the Security & Privacy or Users & Groups pane of System Preferences and turn off automatic login.
    (72672)

  • After upgrading, I cannot log in to windows as administrator. Only user accounts can log into windows. I can make no changes or restor, because I cannot gain administrator access.

    I cannot log in as administrator. This happened immediately after installing 4.0

    Hi Tracy,
    I don't suspect Malware yet, Id guess Disk corruption or failing Hard Drive with Files not found.
    Could be many things, we should start with this...
    "Try Disk Utility
    1. Insert the Mac OS X Install disc, then restart the computer while holding the C key.
    2. When your computer finishes starting up from the disc, choose Disk Utility from the Installer menu at top of the screen. (In Mac OS X 10.4 or later, you must select your language first.)
    *Important: Do not click Continue in the first screen of the Installer. If you do, you must restart from the disc again to access Disk Utility.*
    3. Click the First Aid tab.
    4. Select your Mac OS X volume.
    5. Click Repair Disk, (not Repair Permissions). Disk Utility checks and repairs the disk."
    http://docs.info.apple.com/article.html?artnum=106214
    Then try a Safe Boot, (holding Shift key down at bootup), run Disk Utility in Applications>Utilities, then highlight your drive, click on Repair Permissions, reboot when it completes.
    (Safe boot may stay on the gray radian for a long time, let it go, it's trying to repair the Hard Drive.)
    If perchance you can't find your install Disc, at least try it from the Safe Boot part onward.

  • How i can login into my computer laptop, I forgot my password

    Need to login into my laptop. I need help.

    Hi,
    Using another PC, download the application on the following link and save it to your Downloads folder.
    PC Login Now
    When the download has completed, open your Downloads folder and double-click the installer - this will result in another file appearing which is the disc image ( .ISO ) that you need to burn to a CD.
    You will now need to use an application such as ImgBurn to burn this ISO correctly to a blank CD - a guide on using ImgBurn to write an ISO to a disc is Here.
    When the disc has been created, shutdown the notebook you can't log-in on, tap away at the esc key as soon as you press the power button to access the Start-up Menu, insert the CD, select Boot Options ( usually f9 ), use the arrow keys to select the CD/DVD drive and hit enter - you may also have to 'Press any key' to boot from the CD if asked.
    Follow the instructions on the guide Here to remove the password.
    Regards,
    DP-K
    ****Click the White thumb to say thanks****
    ****Please mark Accept As Solution if it solves your problem****
    ****I don't work for HP****
    Microsoft MVP - Windows Experience

  • Is there any way to create a bookmark in safari that automatically creates itself for every user/account that logs into the computer?

    I am currently trying to add in a bookmark to Safari that will be automatically created on every account on the Mac.
    Is that possible? Or is the only way to do such a thing, to have to add it to each and every Safari on each individual account?

    HawkStreet wrote:
    I am currently trying to add in a bookmark to Safari that will be automatically created on every account on the Mac.
    Is that possible?
    No, unfortunately.
    Or is the only way to do such a thing, to have to add it to each and every Safari on each individual account?
    Yes.

  • Can a single account be logged into more than once at the same time

    -
    Firstly, please excuse me if this has already been asked - I tried searching for various terms but couldn't see anything.
    At present we run a single account (non-admin) on our iMac G5 which holds all out families photos/music/movies etc. I'm wanting to add a MacBook to our iMac. They would communicate either wirelessly, or via an ethernet hub. We would like to fire up the laptop and log into that same account, so all that information is available (read and write) from both computers, and at the same time.
    Is this possible? If so, how is it achieved. Is there some network settings that have to be made on the MacBook?
    I'm aware that there will be limitations - i.e. two people won't be able to modify the same file at the same time. Also that the iMac will have to be powered up for the account to be accessed etc.
    Finally, due to space considerations I'm wanting to move the home folder for our existing account onto an external FW drive (using the techniques I've found in other posts on this forum). Will this affect any solution to my original question?
    Thanks for your time.

    When you turn on file sharing, others can see your computer in the Finder > Go > Network window, where they can click on it to see what shares are available. These can be the public folders (which don't need a password to connect), or user folders (which do). By connecting to one of the shares, they then have access to the files within them. If you don't want to use an external disk, you can use SharePoints to share folders within your account, such as Music or Pictures. Just be aware that sharing files within a user account can run into permissions issues, for example trying to edit a document owned by someone else, which is one of the reasons to use an external disk. Tiger and Leopard also support Access Control Lists, but you need to know what you are doing.

  • My daughters computer crashed along with her itunes library.  She can plug it into my computer so how do we create her account on my computer?  When we plug it in, it wants to replace her nano songs with my library.

    My daughters computer crashed along with her itunes library.  She can plug it into my computer so how do we create her account on my computer?  When we plug it in, it wants to replace her nano songs with my library.

              Not quite surewhat your asking exactly. You look here for different ways on importing media from nano to your computer! https://discussions.apple.com/thread/2417169?start=0&tstart=0

  • If someone steels your ipod nano with music already on it, can they then plug the nano into their computer and have access to my itunes account and all the music there also?

    If someone steels your idpod nano with music already on it.....can they also plug the stolen ipod into their computer and have my itunes account pop up with all my current music there?

    No, the must have your apple id and pw to do so it will also ask for them to erase and sync

  • Can not log into server computer with any accounts - "You are unable to login to the user account "abcdefg" at this time. Logging in to the account failed because an error occurred."

    I have a Mac mini running the latest version of OS X and Server. Been running fine and flawlessly. However, I had a strange problem with the iCloud preferences panel crashing when I tried to access it, so I rebooted. Now I can not log into the system with any accounts. My master admin account (along with all the others) gives me the error:
    You are unable to login to the user account "abcdefg" at this time. Logging in to the account failed because an error occurred."
    I am able to see the server from other macs and I can log into it using the same account, but it only shows me a few of the shared folders I have access to but NOT to my main directories.
    Rebooting into Command-R and doing a disk utility, I try and repair permission on that drive and get a bunch of errors like:
    ACL found but not expected on Users
    Repaired "Users"
    ACL found but not expected on Users/.localized
    Repaired "Users/.localized"
    ACL found but not expected on Users/Shared
    Repaired "Users/shared"
    ACL found but not expected on Users/Shared/.localized
    Repaired "Users/Shared/.localized"
    Permissions repair complete.
    But rebooting is no joy...same problem. Any idea what is going on or how to repair it? Should I do a time machine restore? Complete new OS X install? Any idea what is causing this or how to salvage it?

    Got everything to re-install and it worked fine...for a few hours. Then I came in to find ALL of my network users deleted. Just GONE. Then found out the Open Directory was trashed and was unable to open, recover or restore from a backup. Looks like I may have a bad drive here.
    I installed a new drive in the system, re-installed and so far (for a couple of hours anyway) the system seems to be working and stable.

Maybe you are looking for