|
Posted by John on September 15, 2007, 3:15 pm
Please log in for more thread options eheheh...
Thank you for your time...
But we never know when something strange is possible, so is better to ask
than try to do stupid configurations.
;)
> Wow. Whoever is telling you this must be on some really good drugs!
> Non-domain computers cannot do any kind of Kerberos communications at all.
>
> --
> Steve Riley
> steve.riley@microsoft.com
> http://blogs.technet.com/steriley
> http://www.protectyourwindowsnetwork.com
>
>
>> That's what I thought
>> I've been told that creating a IPSec policy and configuring that IPSec
>> policy in some servers in domain using only AH (Authentication Header)
>> using Kerberos authentication would work for comunication witrh XP
>> machines not members of the domain.
>> Does this sounds correct for you?
>> Thanks for your time.
>>
>>
>>
>>> Not going to work. Computers in a workgroup do not do Kerberos
>>> Your only two choices are shared secret or certificates
>>> Why are certificates not an option?
>>> Brian
>>>
>>>> Hi everyone,
>>>>
>>>> Is it possible to make a computer in a workgroup to "talk" with a
>>>> server/computer that belongs to a domain using IPSec.
>>>>
>>>> I'm not talking a bout VPN, both machines are in the same physical
>>>> network and authentication using certificates isn't a option, so all I
>>>> can use is Kerberos.
>>>>
>>>
>>
>>
| 
XML Sitemap