Wrong domain is not checked ?

[Matthew Geier]

> That is not completely true, I run Samba 2.0.2 and a bunch of Win98 
> pc's and the authentication is done through Samba and I have a policy 
> that doesn't allow users to log on unless they are authenticated within 
> the domain.
> So that is a way to solve it.
> 

 And remarkably easy to defeat. Cause the task manager to appear
(one of the 'windows' keys) and 'run application' explorer.exe.

 Works as a policy, but dont think for a minute the machine is
'secure'.