Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

My company allows users to bring their own devices into the office and use the internal network due to our fast internet connection. These devices/PC's are not joined to the company Windows Domain.

Can anyone on the domain, including domain admin accounts, access files or shares on these devices/PC's without the owners knowledge? Are users personal files safe?

share|improve this question

closed as off topic by pauska, Dan, Tim Brigham, joeqwerty, HopelessN00b Sep 6 '12 at 15:58

Questions on Server Fault are expected to relate to professional server, networking, or related infrastructure administration within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

3  
Ask your sysadmin at work. We're a site for professional sysadmins only –  pauska Sep 6 '12 at 12:31
add comment

3 Answers

up vote 2 down vote accepted

When a Windows system is not joined to a domain, it only knows about its local user accounts; the only way to access its files is to provide valid user credentials for the system. So, unless you are using a very easy-to-guess password, you should be safe.

The only exception would be if you have enabled guest sharing (which is disabled by default); then, everyone could access files shared to guest users, without needing any authentication.

share|improve this answer
    
Thanks for the helpful answer. I assumed as much, but as a junior sysadmin wanted to check. Cheers. –  Andrew Sep 6 '12 at 12:49
add comment

Does your IT team install a client on your machine to help them with support issues? Have they changed any settings?

If so this may enable remote file system access for them.

I have used Kaseya for remote support which uses a plugin on client machines which allows full access to the remote file system with no notification to the user.

share|improve this answer
add comment

In general no, your PC will not accept domain credentials and assuming you don't have any open shares then no one will be able to connect to your PC. However this isn't to say you will go undetected, there are many products that let network admins detect unauthorized hosts on networks. I also strongly advise against this practice as you are putting your corporate network at risk and could lead to your termination.

share|improve this answer
    
Thanks. It's part of a 'bring your own device' scheme and all above board, but I can see the risks for most companies. –  Andrew Sep 6 '12 at 12:55
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.