Win2003 Server and Telent session

[zillah]

I have got this scenarion :

One Win 2003 server,and three cleints (2XP+1 win2003). I tried to enable telent session on win2003 server, and I tried to telnet from two clients (XP and 2003) to the server.

1- I received this message in cmd screen in XP:

Welcome to Microsoft Telnet Client

Escape Character is 'CTRL+]'

You are about to send your password information to a remote computer in Internet zone. This might not be safe. Do you want to send anyway(y/n):

a- If I type in "Y" I receive this :

Telnet server could not log you in using NTLM authentication.

Your password may have expired.

Login using username and password

Welcome to Microsoft Telnet Service

login:

when I entered for administrator (username:admin, password:forum),,,,,I received this screen:

*================================================= ==============

Welcome to Microsoft Telnet Server.

*================================================= ==============

F:\Documents and Settings\Administrator.DC1.000>

b- If I press Return Key (not "Y"), I receive this :

Welcome to Microsoft Telnet Service

login:

In both cases I have to type in : username and password.

2- I received this message in cmd screen in 2003:

a- If I type in "Y" I login directly !!!!!(see output 1/a)

*============================================

Welcome to Microsoft Telnet Server

*============================================

F:\Documents and Settings\Administrator.DC1.000>

b- If I press Return Key (not "Y"), I receive this :

Welcome to Microsoft Telnet Service

login:

Why with windowsXP, I was asked about username and password in both cases, while in win2003 only in one case (2-a)?

3- When I create user on the server, what should I configure for that user to be able to telnet from remote computer to the server (I have got no problem if I used username and password form administrator)?

[Marsden]

You have to assign the proper privledges to each user. Create a Group called Telnet Users and give each user what they need to telnet in.

Why with windowsXP, I was asked about username and password in both cases, while in win2003 only in one case (2-a)?

Security... You think anybody should just be able to logon without credentials?

In win2K3 you are already logged on with elevated privledges. You are on the server... so it assumes you have the necessary credentials.