Net Use disconnect failure (XP security BUG)

[chuck.streb@gm.com]

After disconnecting from a share drive, 'Net Use c: /delete"
The following user cannot sign into a share drive.
If you look at the map drives it is not there!

And to make things even worse...

If you just type in the drive you disconnected from in the Start>>Run

"C:"

it will connect you to the drive with the users credentials that has
just disconnected. "CAN YOU SAY SECURITY ISSUE"

This has been an on going problem here for years here with any and
every computer here and frankly it is irritating ... I have to reboot
to be able to sign on under my name.

Hey if you want to have fun though you have someone else account for
awhile

I am pretty sure it is a windows BUG. If I am wrong, someone please
fill me in.

If I am not wrong, MICROSOFT please fix your SECURITY BUG ISSUE.


-Chuck

 

[Pegasus \(MVP\)]

<chuck.streb@gm.com> wrote in message
news:1186088683.934602.156120@m37g2000prh.googlegroups.com...
> After disconnecting from a share drive, 'Net Use c: /delete"
> The following user cannot sign into a share drive.
> If you look at the map drives it is not there!
>
> And to make things even worse...
>
> If you just type in the drive you disconnected from in the Start>>Run
>
> "C:"
>
> it will connect you to the drive with the users credentials that has
> just disconnected. "CAN YOU SAY SECURITY ISSUE"
>
> This has been an on going problem here for years here with any and
> every computer here and frankly it is irritating ... I have to reboot
> to be able to sign on under my name.
>
> Hey if you want to have fun though you have someone else account for
> awhile
>
> I am pretty sure it is a windows BUG. If I am wrong, someone please
> fill me in.
>
> If I am not wrong, MICROSOFT please fix your SECURITY BUG ISSUE.
>
>
> -Chuck
>

You need to be a little more precise in your problem description:
- How exactly did you map the drive letter to the share?
- Where does the share reside?
- In most cases C: is the local system drive. How can you map
a share to C:?
- When you say "The following user", do you mean to say that
you're logging off and someone else logs on?

I suggest you post a detailed step-by-step explanation of what
you're doing so that respondents can follow each and every one
of your steps. This will make it clear if your observation is a
security issue or perhaps a lack of understanding.

 

[chuck.streb@gm.com]

On Aug 2, 5:23 pm, "Pegasus \(MVP\)" <I....@fly.com> wrote:
> <chuck.st...@gm.com> wrote in message
>
> news:1186088683.934602.156120@m37g2000prh.googlegroups.com...
>
>
>
>
>
> > After disconnecting from a share drive, 'Net Use c: /delete"

sorry, the J: drive which is a network drive

> > The following user cannot sign into a share drive.

Anyone who comes up to the computer after the drive is supposed to be
disconnected.

> > If you look at the map drives it is not there!

If you look at the network drives there are none.

>
> > And to make things even worse...
>
> > If you just type in the drive you disconnected from in the Start>>Run
>
> > "C:"

"J:"

>
> > it will connect you to the drive with the users credentials that has
> > just disconnected. "CAN YOU SAY SECURITY ISSUE"

This is a big problem

>
> > This has been an on going problem here for years here with any and
> > every computer here and frankly it is irritating ... I have to reboot
> > to be able to sign on under my name.
>
> > Hey if you want to have fun though you have someone else account for
> > awhile
>
> > I am pretty sure it is a windows BUG. If I am wrong, someone please
> > fill me in.
>
> > If I am not wrong, MICROSOFT please fix your SECURITY BUG ISSUE.
>
> > -Chuck
>
> You need to be a little more precise in your problem description:
> - How exactly did you map the drive letter to the share?
> - Where does the share reside?
> - In most cases C: is the local system drive. How can you map
> a share to C:?
> - When you say "The following user", do you mean to say that
> you're logging off and someone else logs on?
>
> I suggest you post a detailed step-by-step explanation of what
> you're doing so that respondents can follow each and every one
> of your steps. This will make it clear if your observation is a
> security issue or perhaps a lack of understanding.- Hide quoted text -
>
> - Show quoted text -

 

[Pegasus \(MVP\)]

<chuck.streb@gm.com> wrote in message
news:1186112349.551452.166730@o61g2000hsh.googlegroups.com...
> On Aug 2, 5:23 pm, "Pegasus \(MVP\)" <I....@fly.com> wrote:
>> <chuck.st...@gm.com> wrote in message
>>
>> news:1186088683.934602.156120@m37g2000prh.googlegroups.com...
>>
>>
>>
>>
>>
>> > After disconnecting from a share drive, 'Net Use c: /delete"
>
> sorry, the J: drive which is a network drive
>
>> > The following user cannot sign into a share drive.
>
> Anyone who comes up to the computer after the drive is supposed to be
> disconnected.
>
>> > If you look at the map drives it is not there!
>
> If you look at the network drives there are none.
>
>>
>> > And to make things even worse...
>>
>> > If you just type in the drive you disconnected from in the Start>>Run
>>
>> > "C:"
>
> "J:"
>
>>
>> > it will connect you to the drive with the users credentials that has
>> > just disconnected. "CAN YOU SAY SECURITY ISSUE"
>
> This is a big problem
>
>>
>> > This has been an on going problem here for years here with any and
>> > every computer here and frankly it is irritating ... I have to reboot
>> > to be able to sign on under my name.
>>
>> > Hey if you want to have fun though you have someone else account for
>> > awhile
>>
>> > I am pretty sure it is a windows BUG. If I am wrong, someone please
>> > fill me in.
>>
>> > If I am not wrong, MICROSOFT please fix your SECURITY BUG ISSUE.
>>
>> > -Chuck
>>
>> You need to be a little more precise in your problem description:
>> - How exactly did you map the drive letter to the share?
>> - Where does the share reside?
>> - In most cases C: is the local system drive. How can you map
>> a share to C:?
>> - When you say "The following user", do you mean to say that
>> you're logging off and someone else logs on?
>>
>> I suggest you post a detailed step-by-step explanation of what
>> you're doing so that respondents can follow each and every one
>> of your steps. This will make it clear if your observation is a
>> security issue or perhaps a lack of understanding.- Hide quoted text -
>>
>> - Show quoted text -

Your reply is hardly a step-by-step procedure that someone
can duplicate on his own machine. If you're serious about your
question then you need to take the time to go down to a detail
level.

 

[Bob I]

There is no security issue if the user logs off. IF the user does not
log off and walks away, THERE IS your security issue!

chuck.streb@gm.com wrote:

> On Aug 2, 5:23 pm, "Pegasus \(MVP\)" <I....@fly.com> wrote:
>
>><chuck.st...@gm.com> wrote in message
>>
>>news:1186088683.934602.156120@m37g2000prh.googlegroups.com...
>>
>>
>>
>>
>>
>>
>>>After disconnecting from a share drive, 'Net Use c: /delete"
>
>
> sorry, the J: drive which is a network drive
>
>
>>>The following user cannot sign into a share drive.
>
>
> Anyone who comes up to the computer after the drive is supposed to be
> disconnected.
>
>
>>>If you look at the map drives it is not there!
>
>
> If you look at the network drives there are none.
>
>
>>>And to make things even worse...
>>
>>>If you just type in the drive you disconnected from in the Start>>Run
>>
>>>"C:"
>
>
> "J:"
>
>
>>>it will connect you to the drive with the users credentials that has
>>>just disconnected. "CAN YOU SAY SECURITY ISSUE"
>
>
> This is a big problem
>
>
>>>This has been an on going problem here for years here with any and
>>>every computer here and frankly it is irritating ... I have to reboot
>>>to be able to sign on under my name.
>>
>>>Hey if you want to have fun though you have someone else account for
>>>awhile
>>
>>>I am pretty sure it is a windows BUG. If I am wrong, someone please
>>>fill me in.
>>
>>>If I am not wrong, MICROSOFT please fix your SECURITY BUG ISSUE.
>>
>>>-Chuck
>>
>>You need to be a little more precise in your problem description:
>>- How exactly did you map the drive letter to the share?
>>- Where does the share reside?
>>- In most cases C: is the local system drive. How can you map
>> a share to C:?
>>- When you say "The following user", do you mean to say that
>> you're logging off and someone else logs on?
>>
>>I suggest you post a detailed step-by-step explanation of what
>>you're doing so that respondents can follow each and every one
>>of your steps. This will make it clear if your observation is a
>>security issue or perhaps a lack of understanding.- Hide quoted text -
>>
>>- Show quoted text -
>
>
>

 

[chuck.streb@gm.com]

On Aug 3, 9:44 am, Bob I <bire...@yahoo.com> wrote:
> There is no security issue if the user logs off. IF the user does not
> log off and walks away, THERE IS your security issue!
>
>

Thats the problem. When you log off, you think you are logged off. But
you are not.
All indications are your drive is dismounted and you are disconnected.
But if you type the path of the drive in the Startup >> Run
You will connect to the drive with the credentials of the last
user .....

please read before commenting.

I will follow up with the steps ...

 

[Bob I]

Strange, when I try that it throws up the username, password logon dialog.

chuck.streb@gm.com wrote:

> On Aug 3, 9:44 am, Bob I <bire...@yahoo.com> wrote:
>
>>There is no security issue if the user logs off. IF the user does not
>>log off and walks away, THERE IS your security issue!
>>
>>
>
>
> Thats the problem. When you log off, you think you are logged off. But
> you are not.
> All indications are your drive is dismounted and you are disconnected.
> But if you type the path of the drive in the Startup >> Run
> You will connect to the drive with the credentials of the last
> user .....
>
> please read before commenting.
>
> I will follow up with the steps ...
>

 

[chuck.streb@gm.com]

It doesnt always happen ... but it happens here enough (here).
We use a VB app that executes the net use command.

On Aug 3, 11:52 am, Bob I <bire...@yahoo.com> wrote:
> Strange, when I try that it throws up the username, password logon dialog.
>
>
>
> chuck.st...@gm.com wrote:
> > On Aug 3, 9:44 am, Bob I <bire...@yahoo.com> wrote:
>
> >>There is no security issue if the user logs off. IF the user does not
> >>log off and walks away, THERE IS your security issue!
>
> > Thats the problem. When you log off, you think you are logged off. But
> > you are not.
> > All indications are your drive is dismounted and you are disconnected.
> > But if you type the path of the drive in the Startup >> Run
> > You will connect to the drive with the credentials of the last
> > user .....
>
> > please read before commenting.
>
> > I will follow up with the steps ...- Hide quoted text -
>
> - Show quoted text -

 

[chuck.streb@gm.com]

*I use a VB application that uses "Net Use J: \\129.124.204.11\1j"

*The VB app also disconnects "Net Use J: /delete"

*Then we check the connection "net use"

The command returned
-=-=-=-
New connections will not be remembered.

There are no entries in the list.
-=-=-=-=-

We would then try to connect to the drive using "Net Use J: \
\129.124.204.11\1j" with no success.
This does not happen all the time but it does happen frequently. At
this point do the below.

*Then I goto Start>>Run>>Open:

and put in the path of the drive that was disconnected.

*"\\129.124.204.11\1j"

and the window appears with that directory and I have the privileges
of the logged out user.

 

[Pegasus \(MVP\)]

<chuck.streb@gm.com> wrote in message
news:1186165210.432621.58460@19g2000hsx.googlegroups.com...
> *I use a VB application that uses "Net Use J: \\129.124.204.11\1j"
>
> *The VB app also disconnects "Net Use J: /delete"
>
> *Then we check the connection "net use"
>
> The command returned
> -=-=-=-
> New connections will not be remembered.
>
> There are no entries in the list.
> -=-=-=-=-
>
> We would then try to connect to the drive using "Net Use J: \
> \129.124.204.11\1j" with no success.
> This does not happen all the time but it does happen frequently. At
> this point do the below.
>
> *Then I goto Start>>Run>>Open:
>
> and put in the path of the drive that was disconnected.
>
> *"\\129.124.204.11\1j"
>
> and the window appears with that directory and I have the privileges
> of the logged out user.
>

We're getting a little closer but there appears to be some gaps
in your description.
- You start by saying that you invoke a VB application but
you do not say when you log on and under which account.
- Later on you write "of the logged out user" but again you
do not say anything about logging off and logging back in
again, or perhaps about user switching.
- Posting your VB code is essential.
- What happens when you do the same in a batch file?
- Why would you use a script (which tends to be quite
chatty) when a simple batch file would suffice?

I have my suspicions about what's going on but I need a lot
more detailed information.