Mapping a Drive on Local Network Forces ICS/NAT Host to Dial

If you issue a net use * \\workstation\share /user:securityprovider\username password command on a Windows 2000-based computer that is running Internet Connection Sharing (ICS) or Network Address Translation (NAT), the computer may dial the Internet.

When you use the /user:securityprovider\username switch with the net use command, Net.exe assumes that "securityprovider" is a domain. Therefore, the client computer queries Domain Name System (DNS) for a domain controller in the "securityprovider" domain to begin Kerberos authentication. If an ICS or NAT host is acting as a DNS proxy, the DNS query is forwarded to the Internet. In a workgroup situation, it is sufficient to use the /user:username switch instead.