1904: User Access broken?

%3CLINGO-SUB%20id%3D%22lingo-sub-511539%22%20slang%3D%22en-US%22%3E1904%3A%20User%20Access%20broken%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-511539%22%20slang%3D%22en-US%22%3E%3CP%3EI%20just%20installed%201904%20on%20Server%20Core%202019.%3CBR%20%2F%3EWhen%20I%20go%20to%20https%3A%2F%2Fipaddress%20I%20have%20to%20login%20as%20my%20admin%20user%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EWhen%20I%20go%20to%20https%3A%2F%2Fservername%20I%20get%20automatic%20logged%20in%20as%20my%20normal%20desktop%20user.%3CBR%20%2F%3E%3CBR%20%2F%3Ein%20%22Access%22%20I%20have%20only%20%22Domain%20Admins%22%20and%20%22BUILTIN%2FAdministrators%22.%20In%26nbsp%3B%22BUILTIN%2FAdministrators%22%20there%20is%20only%20%22Administrator%22%20and%20%22Domain%20Admins%22.%3CBR%20%2F%3E%3CBR%20%2F%3E1.%20Why%20can%20a%20normal%20user%20log%20in%3F%20I%20can't%20manage%20WAC%2C%20but%20I%20never%20gave%20permission%20that%20a%20normal%20user%20can%20login%20at%20all.%3CBR%20%2F%3E%3CBR%20%2F%3E2.%20Why%20is%20there%20different%20behavior%20when%20logging%20in%20with%20the%20IP-address%20(asks%20for%20credentials)%20and%20the%20hostname%20(automatic%20SSO)%3F%3CBR%20%2F%3E%3CBR%20%2F%3E3.%20How%20can%20I%20disable%20SSO%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-706159%22%20slang%3D%22en-US%22%3ERe%3A%201904%3A%20User%20Access%20broken%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-706159%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F331957%22%20target%3D%22_blank%22%3E%40Joachim1972%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDid%20find%20a%20solution%20for%20this%20issue%3F%3C%2FP%3E%3CP%3EAfter%20installation%20i%20also%20have%20the%20same%20issue%20and%20would%20like%20to%20disable%20this.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-706432%22%20slang%3D%22en-US%22%3ERe%3A%201904%3A%20User%20Access%20broken%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-706432%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F362828%22%20target%3D%22_blank%22%3E%40Wusaa%3C%2FA%3E%26nbsp%3BSadly%20I%20did%20not%20find%20any%20solution%20and%20so%20had%20to%20uninstall%20it%20again%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-706885%22%20slang%3D%22en-US%22%3ERe%3A%201904%3A%20User%20Access%20broken%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-706885%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F331957%22%20target%3D%22_blank%22%3E%40Joachim1972%3C%2FA%3E%26nbsp%3B%20What%20i%20am%20considering%20is%20fine%20tuning%20the%20Local%20firewall.%3C%2FP%3E%3CP%3ESo%20far%20it%20is%20working%20ok%20maybe%20this%20is%20solution%20for%20you........%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-798138%22%20slang%3D%22en-US%22%3ERe%3A%201904%3A%20User%20Access%20broken%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-798138%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20the%20same%20issue...%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-805538%22%20slang%3D%22en-US%22%3ERe%3A%201904%3A%20User%20Access%20broken%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-805538%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F331957%22%20target%3D%22_blank%22%3E%40Joachim1972%3C%2FA%3E%26nbsp%3B%3A%20I%20can%20confirm%20this%20is%20still%20an%20issue%20with%201904.1.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

I just installed 1904 on Server Core 2019.
When I go to https://ipaddress I have to login as my admin user


When I go to https://servername I get automatic logged in as my normal desktop user.

in "Access" I have only "Domain Admins" and "BUILTIN/Administrators". In "BUILTIN/Administrators" there is only "Administrator" and "Domain Admins".

1. Why can a normal user log in? I can't manage WAC, but I never gave permission that a normal user can login at all.

2. Why is there different behavior when logging in with the IP-address (asks for credentials) and the hostname (automatic SSO)?

3. How can I disable SSO?

 

 

5 Replies
Highlighted

@Joachim1972 

 

Did find a solution for this issue?

After installation i also have the same issue and would like to disable this.

 

Highlighted

@Wusaa Sadly I did not find any solution and so had to uninstall it again

Highlighted

@Joachim1972  What i am considering is fine tuning the Local firewall.

So far it is working ok maybe this is solution for you........

Highlighted

I have the same issue...

Highlighted

@Joachim1972 : I can confirm this is still an issue with 1904.1.