up vote 0 down vote favorite
share [g+] share [fb]

Can a client pc authenticate against a Kerberos / KCD authenticated service (that is - not use NTLM) if they have valid domain accounts, but the pc they're using can't access any of the DCs and / or isn't a member of the domain itself?

link|improve this question
feedback

2 Answers

up vote 0 down vote

I don't think this strictly answers your question, but I see two points to be made here:

  1. Can a user log on to the domain from a computer not joined to the domain? The answer is no, as far as I'm aware.

  2. Can a user access domain resources from a computer not joined to the domain? The answer is yes.

link|improve this answer
feedback
up vote 0 down vote
  1. Can a user access domain resources from a computer not joined to the domain? The answer is yes. So, can the computer which has not joined the domain use a delegated user to authenticate on behalf of other users?
link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.