FLAW IN WIN2000, NT 4.0 MAKES DOMAINS 'TOO TRUSTING']

[David Collier-Brown]

in http://idg.net/ic_797115_1773_1-3921.html, Joris Evers, IDG News
Service, Amsterdam Bureau writes:
| The flaw lies in the trust relationships between network 
| domains in Windows 2000 and NT 4.0 environments. The 
| trusting domain does not verify that the trusted domain is
| actually authoritative for all the SIDs (security
| identifiers) in the authorization data, allowing an attacker 
| to increase his or her access level, Microsoft said.

Which sounds like something we may inadvertantly be emulating...

Anyone conversant with this? 

--dave