- I set up a simple network with two computers, both on the same work group.
- I created a local user 'A' with password 'A' on Computer 1.
- And then I created an identically named local user 'A' with identical password 'A' on Computer 2.
- What I notice is that when I'm logged in as 'A' in computer 2, I am allowed network access as 'A' in Computer 1, e.g., when browsing 'A' shared folders.
- This is ironic as even though they are the identical in name, they are actually two different local users on two different computers!
- This to me can be a security hazard. What if coincidentally (or maliciously) a person has the same username and password in computer 2 and thus is incorrectly given access to Computer 1?
- What is this sharing of username and password called?
- How do we enable/disable this sharing of identical local usernames and passwords between two computers?
I've also realized that this works during DCOM calls as well.