4 ms·
But typically that environment would fail bullet 4, right?
by jameshart 11y ago
But typically that environment would fail bullet 4, right?
- peterwwillis 11y agoAre you asking if local accounts inside corporate networks are typically secure by default?
- JoBrad 11y agoYou have to create an account, then remove the password from it. You can't create a new account[1] without a password. [1] http://windows.microsoft.com/en-us/windows-8/disable-remove-password http://windows.microsoft.com/en-us/windows-8/disable-remove-...
- tjoff 11y agoThat's when using a microsoft account. Local accounts can be created without password directly from the install (at least in W10).
- deleted 11y ago[deleted]
- criley2 11y agoWhat corporate network uses local accounts as opposed to Active Directory/Domain accounts? If your business is not managing accounts over the domain via Active Directory and is individually setting up unmanaged local accounts for employees, you have far far bigger security issues than this remote desktop exploit.
- peterwwillis 11y agoAny internal corporate network where a lot of R&D is done. AD accounts are typically for users and generic accounts, but if you're just spinning up a VM to test something, or you rebuild hosts regularly, local accounts speed up workflows. And a lot of people don't have solid security practices in place.
- arca_vorago 11y agoI've been crucified in irc for suggesting moving away from samba and towards using chef/puppet/ansible/salt to manage windows user accounts (if coupled with pxe booting for dynamic image loading on user machines...) I still like the idea. OpenLDAP, etc also aren't cutting it to me... but don't confuse me misunderstanding the current importance of AD lock-in and the man/mind-hours needed to transition away from it.
- l0c0b0x 11y agoSounds like it only takes one local account, and there's got to be a local admin account in order to add the machine to a domain.
- yuhong 11y agoYes, it has to be a local admin account or it would have to be manually added to the group.