Re: NTLM queries

From: Michael Giorgio - MS MVP (Michael.Giorgio_at_NoSpam.mayerson.com)
Date: 06/09/03 

Date: Mon, 9 Jun 2003 09:32:42 -0400

If you at your settings you can see why the NT 4.0 server cannot
logon:

Level 0 - Send LM response and NTLM response; never use NTLMv2 session
             security

Level 5 - DC refuses LM and NTLM authenication (accepts only NTLMv2)

Try setting the NT server LMCompatibilityLevel 1. BTW the NT server
must
be running SP4 or higher.

"megan" <zhongmeiyi@yahoo.com.sg> wrote in message
news:bbsslf$3nb$1@reader01.singnet.com.sg...
>
> I've a bit of trouble understanding how NTLM works on my setup. I've
read
> the microsoft documents on how to enable NTLMv2 authentication, but
i'm
> don't really see how it works on my setup.
>
> Basically, i've two computers, one with win2k advance server (let's
call
> this 'win2k'), the other with winNT server (let's call this 'client').
win2k
> is set to LMCompatibility Level = 5, and client is set to
LMCompatibility
> Level = 0. i've set up win2k to log successful and unsuccessful login
and
> logoff attempts.
>
> so basically, i try to login from winNT into the win2k domain.
although i
> can successfully enter, the log on win2k shows an authentication
failure. My
> question is, is there another form of authentication that serves as a
> backup? i mean, because ntlm authentication fails, therefore it uses
another
> authentication, and because this is successful, it allows me to login
to the
> client (winNT). Is this right?
>
> Any help or hints are appreciated. Thanks!
> Megan
>
>

Relevant Pages

  • Re: OK, I must be retarded or something...
    ... Here is what I have now in my settings now ... Tab ... Do I need to do something with POP3 Virtual Server? ... You can't disable anonymous authentication, as that is what all other ...
    (microsoft.public.exchange.admin)
  • Re: Integrated authentication and IE proxy settings
    ... ISA server for all requests. ... Check your Netowrks/Internal/Properites/Web Browser settings. ... IE Options/Advanced/Enable Integrated Windows Authentication is ...
    (microsoft.public.isa.clients)
  • Re: Integrated authentication and IE proxy settings
    ... IE Options/Connections/LAN Settings/Proxy Server points to a specific IP ... IE Options/Advanced/Enable Integrated Windows Authentication is checked. ... I reset IE Security level to default for all zones - still prompts. ... This behavior is governed by the security settings of IE. ...
    (microsoft.public.isa.clients)
  • Re: OK, I must be retarded or something...
    ... Here is what I have now in my settings ... > Do I need to do something with POP3 Virtual Server? ... You can't disable anonymous authentication, as that is what all other ... You can also set up SSL on the POP3 virtual server ...
    (microsoft.public.exchange.admin)
  • POP3/SMTP external authentication error "550 5.7.1 Unable to Relay"
    ... My default settings for the SMTP virtual server include the following: ... Authentication = Anonymous, Basic, Integrated Windows Authentication. ... One last thing, if I force the clients IP into the relay list, everything works fine. ...
    (microsoft.public.exchange.setup)