Re: Kerberos

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 07/28/04

  • Next message: Steven L Umbach: "Re: Group Access..." 
    Date: Wed, 28 Jul 2004 16:24:34 GMT

    Kerberos will be used by default for authentication between the W2K domain controller
    and domain W2K/XP Pro. computers and users logging on the domain using those
    computers. You can verify it by enabling auditing of account logon events in the
    Domain Controller Security Policy. W2K cam fallback to lm/ntlm/ntlmv2 if the time
    skew is greater than five minutes between computers or the user access a resource by
    IP address instead on computer name. --- Steve

    "Asif Attari" <anonymous@discussions.microsoft.com> wrote in message
    news:5aee01c474aa$e9eb22a0$a601280a@phx.gbl...
    > I have w2k with sp4, I have a only domain (One DC). I want
    > to work on Kerberos.
    >

  • Next message: Steven L Umbach: "Re: Group Access..."

    Relevant Pages

    • Re: Domain Password Security
      ... accounts need to use complex passwords and minimum of ntlmv2 should be used for lan ... Services Client and configuring authentication level on Domain Controller Security ... controllers if you have all W2K/XP computers. ... I also recommend you enable auditing of account logon and logon ...
      (microsoft.public.win2000.security)
    • Re: Domain Password Security
      ... Domain Controller Security ... >controllers if you have all W2K/XP computers. ... >administrator accounts only when needed to, ... account logon and logon ...
      (microsoft.public.win2000.security)
    • Re: Custom rights
      ... I don't know the specific answer to that offhand as I don't have Exchange ... >> By default any user can log onto a server other than domain controller. ... >> To add computers to the domain go to AD Users and Computers. ... >> not work on privileged groups such as administrators. ...
      (microsoft.public.win2000.security)
    • Re: The name could not be resolved
      ... On a domain controller, ... question, and check Exchange General to see what server they're on, and you ... >> Its possible that the Global Catalog server that Outlook is hitting to ... Connect via Active Directory Users and Computers and connect ...
      (microsoft.public.exchange.admin)
    • Re: Custom rights
      ... By default any user can log onto a server other than domain controller. ... allow then to logon to a domain controller give them the logon locally user ... To add computers to the domain go to AD Users and Computers. ... > Look into AD delegation, though you may need to do some custom delegation. ...
      (microsoft.public.win2000.security)