Access to ADS (configuration container) from NT4 local system account

[marcel....@hotmail.com]

Hi,

I'm trying to get the Site information by accessing the ADS as a local
system account on a NT4 workstation.
I'm using this simple vbscript statement.

Set Loc =
GetObject"LDAP://CN=10.8.60.0/24,CN=Subnets,CN=Sites,CN=Configuration,dc=pc,
DC=test,DC=nl")
msgbox(loc.location)

This works fine when logged on as a domainuser, and on a windows 2000
professional it works even fine with the local system account.

Any ideas ?

Marcel

[Joe Richards]

Windows 2000 LocalSystem Account is handled a little differently than NT4
LocalSystem Account. They have basically made it so the machine will send
the machine's computer account info if accessing something outside of the
machine so a real account is actually being used.

The only thing you will be able to access from NT4 LocalSystem will be
information that is available to anonymous access such as the RootDSE or
anything that has an Everyone ACL for it.

--
---
Joe Richards
www.joeware.net
---
NEED TO GET CLEAR TEXT PASSWORDS ON NT OR WINDOWS 2000???
Go to www.joeware.net Products link and check out Grab Pass.
---
NEED TO LOCK DOWN THE BUILT-IN ADMIN ACCOUNT FROM PASSWORD CHANGES????
Go to www.joeware.net Products link and check out Secure500.
---

<marcel....@hotmail.com> wrote in message
news:uQDLB2SRBHA.1628@tkmsftngp05...

[marcel....@hotmail.com]

Thanks,

I'v added Read rights to the group "ANONYMOUS LOGON" in
CN=Sites,CN=Configuration, and to CN=Schema,CN=Configuration and now it's
working fine. NT Local system account can read the site and location
information out of the ADS. (the Read rights to the schema container are
nessesary to be able to read from the Sites -and subnets- container)

regards,
Marcel

"Joe Richards" <humore...@hotmail.com> schreef in bericht
news:eaHgs8TRBHA.1656@tkmsftngp03...

[Joe Richards]

Cool, glad I could help!

--
---
Joe Richards
www.joeware.net
---
NEED TO GET CLEAR TEXT PASSWORDS ON NT OR WINDOWS 2000???
Go to www.joeware.net Products link and check out Grab Pass.
---
NEED TO LOCK DOWN THE BUILT-IN ADMIN ACCOUNT FROM PASSWORD CHANGES????
Go to www.joeware.net Products link and check out Secure500.
---

<marcel....@hotmail.com> wrote in message
news:O4Yf6PrRBHA.1528@tkmsftngp04...