[cifs-protocol] [MS-GPOL] Computer group policy fetch - what credentials are used ? [REG:116090914649988]

Jeremy Allison jra at samba.org
Tue Sep 20 18:22:58 UTC 2016


On Tue, Sep 20, 2016 at 05:39:58PM +0000, Edgar Olougouna wrote:
> Hello Jeremy,
> At machine startup, before login, any Kerberos traffic and related authentication uses the machine account, e.g. AS Request and TGS Response have Cname: WIN-CNJIRV8M39S$
> I am filing a document bug to get MS-GPOL clarified.

Thanks a *LOT* Edgar. I also got a wireshark
trace here at the plugfest that also confirms
this (thanks a lot to Microsoft engineers !).

Cheers,

Jeremy.



More information about the cifs-protocol mailing list