oxide54 Posted April 24, 2010 Posted April 24, 2010 Hi, I have an increasing number of users who have V2 (Vista/Windows 7) Profiles appearing in the profiles share, any idea working out which machine they have logged in from, As we are an all XP shop here so I can't understand this?
SYNACK Posted April 24, 2010 Posted April 24, 2010 If they are able to log on and generate a V2 profile they have to be using a domain joined machine. I would look through or run a search in AD of the computer accounts to see which ones are Windows Vista/7/2008 and look at it that way. To join a PC to the domain you need Admin credentials too unless you have specificly set it up differently so I would be taking a serious look at your password security as well.
p858snake Posted April 24, 2010 Posted April 24, 2010 If they are able to log on and generate a V2 profile they have to be using a domain joined machine. I would look through or run a search in AD of the computer accounts to see which ones are Windows Vista/7/2008 and look at it that way. To join a PC to the domain you need Admin credentials too unless you have specificly set it up differently so I would be taking a serious look at your password security as well. I thought the default (at least in 2003) was that any account could add up to 10 machines to the domain.
Stuart_C Posted April 24, 2010 Posted April 24, 2010 I thought the default (at least in 2003) was that any account could add up to 10 machines to the domain. It is as far as I am aware.
oxide54 Posted April 24, 2010 Author Posted April 24, 2010 If they are able to log on and generate a V2 profile they have to be using a domain joined machine. I would look through or run a search in AD of the computer accounts to see which ones are Windows Vista/7/2008 and look at it that way. To join a PC to the domain you need Admin credentials too unless you have specificly set it up differently so I would be taking a serious look at your password security as well. Basically This is the reason I am concerned
SYNACK Posted April 24, 2010 Posted April 24, 2010 I thought the default (at least in 2003) was that any account could add up to 10 machines to the domain. I must have tweaked mine, my method for finding the machines still stands though, if you find some and have ADSI edit installed you can look inside the guilty computer object and find out who joined them to the domain if I recall correctly which could also be useful.
Dos_Box Posted April 24, 2010 Posted April 24, 2010 We have something in the pipeline that will help with this Watch this space........
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now