Re: Unable to authenticate to untrusted domain NTLM v2 related issue

Hi Roger

Thanks for your assistance for far. We are on the same page with
regard this problem.

I did not remove any user ids from the eventlogs. I changed the
workstation name and masked the IP address.

The section for

Logon Process: NtLmSsp

might be important although I can't put my finger on it as my initial
research did occasionally mention
HKLM\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0. I have not been
clear on what this section does so I have left it alone. My XP access
to the domain B DCs have led me to think all is ok here.

With regard sniffing the LAN. Our network is managed by a 3rd party
and we are not allowed to sniff which makes life tricky. I will sneak
a sniff in sometime today/tomorrow.

I assume the best place to run the sniff is on the domain B member
server? Could you advise what I am looking for as I have never run a
sniff before.

.