Does anyone know if there has been anything done by Microsoft regarding the SID manipulation issue? This came up a year or two ago, and it basically meant that the domain was no longer the security boundary. As I recall, manipulation of a SID in one domain could be performed to obtain permissions o...

[ more ]