Without the equipment and software (and knowledge yet) readily available to test myself, I've been wondering about the relationship between computers and domains in a Windows environment. Some information is available in answers like https://security.stackexchange.com/a/83380/58802, but I was thinking about other things, like:
- What information, like the computer SID and stuff, IDs a computer to a domain?
- I assume this information can be faked or replicated, but can it?
- If so, is that a security issue?
Like, if I have a computer that's authorized for a certain domain, and wipe it clean, assuming I took note of whatever locally stored information that is relevant to the case, could I restore the authorization to the domain for my computer, without explicit privileges to administer the domain?
I was also thinking about the-other-way-around-scenarios:
- How does a computer "identify" a certain domain?
- Can the domain be "faked"?
I'm sort of asking if it's possible to trick a computer into "believing" it's on the supposed domain, but it's really not, enabling scenarios where inappropriate policies are forcibly applied and stuff.
I'm asking these questions in the interest of better understanding the security workings of a windows domain (and similar), even though it's really not my main area of competence, and I hope that someone with the proper knowledge will find educating in general to be good cause enough.
Thank you before hand.