Re: Win98 Authentication Error On Upgraded NT to 2000 Server

From: Steven L Umbach (sumbach@ameritech.net)
Date: 02/18/03


From: "Steven L Umbach" <sumbach@ameritech.net>
Date: Tue, 18 Feb 2003 16:19:55 GMT


    Problem may be related to group policy security settings. On your
domain controller check out local security policy for "effective settings".
Under security settings/user rights check to see if everyone is allowed to
access computer from network - I believe that is necessary for downlevel
clients. Under /security options make sure additional restrictions for
anonoymous is NOT set to no access without explicit permissions (do not
allow enumeration of sam account and shares should work fine). For lan
manager authentication level - it needs to be set for send lm and ntlm for
downlevel clients that do not have Active Directory client installed.
Digitally sign client communications and digitally sign server
communications always needs to be disabled also for downlevel clients. If
any of these need to be changed it would be best to do at the domain
controller security policy. Changes will not take effect right away and a
reboot will speed it up. Supposedly running secedit /refreshpolicy
machine_policy /enforce at the command prompt should update right away also,
but my experience is a reboot works faster. I am not sure why a reboot
cleared up your problems and how long that helps, but I thought I would give
you a list of things to check out. -- Steve

"Rob" <robb@metrofile.co.za> wrote in message
news:04cb01c2d71e$a22a0a10$a201280a@phx.gbl...
> Can anyone help : Keep getting following error message
> from our Win98 machines "The domain password you supplied
> is not correct , or access to yor logon server has been
> denied" , win2000pro and Xp no problems .
>
> Our 2000 Server was upgraded from NT4 and is currently
> using SP3.
>
> If we reboot 2000 server win98 users can then logon.
>



Relevant Pages

  • Re: Creeping Oulook connectivity problems
    ... have you done any message tracing to see where they might be getting hung ... Clients are all XP Pro SP2, ... I hard coded the mail server IP into the hosts file. ... > reboot the machine only if we absolutely have to. ...
    (microsoft.public.exchange.admin)
  • [HPADM] SUMMARY -- nfs hang due to stad or lockd?
    ... It looks like the server will need a reboot at some point in time. ... the affected clients are compute servers. ... lab that cannot do a "ll" of a couple of mount points. ...
    (HP-UX-Admin)
  • Re: Uptime for OpenVMS
    ... client off an NFS server, ... wrong) Linux versions of NFS are, in some way, stateful and a reboot ... of the server requires a reboot of all the clients. ...
    (comp.os.vms)
  • Re: Questions about DHCP and DNS migration
    ... I can't think of a reason you'd have to reboot the clients. ... broadcast for the next and should contact the new dhcp server. ... For the DHCP, I did some reserach and used the command "hetsh dhcp server ...
    (microsoft.public.windows.server.active_directory)
  • RE: Users Cant Access Documents on Server
    ... Thanks for using the SBS newsgroup. ... As well as we know, if a workstation would not access network shares, then ... Leave the Default Gateway of the internal NIC blank of the server box. ... Clients That Require SMB Signing ...
    (microsoft.public.windows.server.sbs)