An administrator which is not an Administrator!

[Sherifzn]

I am using Wingate 5.2.3 Build 901. One user within our network which is pre-defined as assumed user inside Wingate, That user is grouped under users group only. I don't know why Wingate allows him to access as Administrator?! And he is getting more accesses and rights than what he should. This user has timing limit in the scheduler to browse, but he can access at any point of time, and he can override the policies restrictions.

Very wired, isn't it?

Hint: The user name on his PC is Administrator, but he doesn’t know the password of Wingate, simply because I keep changing it everyday. Also, no WGIC installed on his PC!

My only solution, is ungrouping the Administrator from any group, and that stops him.
Defiantly this is not the right solution.

Any help?

Thank you in advance.

[adrien]

Hi

If WinGate learns the name of a logged in user on a remote machine, and it matches a name in the WinGate user database, WinGate will assume that the user is that user.

That shouldn't override the previous assumption however so there may be a bug there to fix.

However there are only certain ways to learn that name. The name needs to be transmitted from the client machine to WinGate, this can happen through any of the following methods:

authentication, by WGIC (not there in this case?), by telnet, by POP3

Adrien