Re: Unable to authenticate to untrusted domain NTLM v2 related issue

Good. It can help greatly to take a peek at what is actually happening,
so I would bet that you folks will soon have this resolved.

"lwoody7110" <lwoody@xxxxxxxxxxxxx> wrote in message
news:1158315648.307979.143890@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
We have moved forward a bit - but not yet resolved.

I managed to get some assistance from a Domain A admin who is familiar
with network traces.

He confirmed with the trace capture that the behaviour seen so far,
that the member server does not appear to be passing credentials back
to XP. The domain A admin was able to change his XP to NTLM and this
then worked fine - so the issue is confirmed as a NTLMv2 issue. We
could then see logon success / failures on the domain B DCs.

So - this provides further evidence that the member servers are
dropping the authentication request when a XP client wishes to
authenticate against domain B.

I also noticed on the member server, that after changing the LAN
Manager setting to "Send LM & NTLM - use NTLMv2 session security if
negotiated" and running a RSoP on itself, showed that this policy was
not applied!

I am currently waiting for the domain A admin to report back with more
information as he took some more traces and the RSoP information away
with him to have a think.



.

Relevant Pages

  • Re: Unable to authenticate to untrusted domain NTLM v2 related issue
    ... I managed to get some assistance from a Domain A admin who is familiar ... with network traces. ... I also noticed on the member server, ... information as he took some more traces and the RSoP information away ...
    (microsoft.public.win2000.security)
  • Re: Local Admin user removed from Administrator group
    ... So - if I wanted end users to be able to have local admin accounts, ... Because that's exactly what restricted groups are for...to centrally ... I'd want running on a member server would be something requiring ...
    (microsoft.public.windows.server.sbs)
  • Re: Connect member server to SBS2003.
    ... Thanks Steve, ... Will these admin tools be the same as SBS2003 Server management wizards etc? ... You won't have the AD management tools on the member server. ...
    (microsoft.public.windows.server.sbs)
  • SUS Server
    ... >Test SUS on test member server and worked great. ... >I am unable to connect to admin page. ...
    (microsoft.public.win2000.windows_update)
  • SUS Server
    ... >Test SUS on test member server and worked great. ... >I am unable to connect to admin page. ...
    (microsoft.public.win2000.windows_update)