Re: EFS Event ID: 6203 on Windows Server 2003

From: Kerry Brown (kerry_at_kdbNOSPAMsys-tems.c*a*m)
Date: 05/31/05

  • Next message: kurttrail: "Re: sp2 to sp1" 
    Date: Mon, 30 May 2005 20:10:38 -0700

    "Kerry Brown" <kerry@kdbNOSPAMsys-tems.c*a*m> wrote in message
    news:uaeaN3TZFHA.3364@TK2MSFTNGP12.phx.gbl...
    > "basuraster" <basuraster@gmail.com> wrote in message
    > news:1117465940.524129.86210@z14g2000cwz.googlegroups.com...
    >> Hello
    >>
    >>
    >> This error:
    >> EFS does not support encryption over network sessions established using
    >>
    >> the NTLM protocol.
    >>
    >>
    >> appears when I try create file encrypted in cluster w2003 any idea??
    >>
    >>
    >> My configuration:
    >>
    >>
    >> 1 DC with CA / Mode Mixed
    >> 2 Node Cluster
    >> 1 Workstation
    >>
    >>
    >> thanks
    >>
    >
    > What client are you using? You have to be using Kerberos authentication.
    > If you login from a Win98 machine you are using NTLM authentication.
    >
    > Kerry
    >

    Some links about types of authentication and possible reasons why NTLM may
    be used:

    http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Operations/6291dce1-4ea8-4b4f-a9c1-23926ab6e8dd.mspx

    http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/b01221d7-a5a5-442d-a804-c9fe44fdf448.mspx

    Kerry

  • Next message: kurttrail: "Re: sp2 to sp1"

    Relevant Pages

    • RE: ADS Password Storage Protection
      ... In Windows it is LM or NT (sometimes called NTLM) hashes. ... NTLMv2 refers to the authenication protocol that exchanges the hash ... between the client and server authentication database. ...
      (Security-Basics)
    • Re: Integrated Windows Authentication Timeout?
      ... Is it possible that a different host name is being used for one of the subsequent requests that would break Kerberos auth? ... If you have "Negotiate" authentication set in the metabase, then this can still negotiate down to NTLM if for some reason the protocol thinks that Kerberos is unavailable. ... server. ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • RE: HttpWebRequest over Https Via Proxy Fails using NTLM
      ... The proxy authentication header returns Basic, NTLM, and Negotiate. ... A network trace shows that the https request handshake is as follows: ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: Event log shows NTLM not Kerberos
      ... it needs those SIDs, which is what authentication gives. ... Authentication Package: NTLM ... Authentication Package NTLM not Kerberos? ...
      (microsoft.public.security)
    • Re: Outlook 2000 issue with EXCH 2003
      ... It is related to DNS, the GC utilize DNS to find NTLM ... we have tested outlook 2k3 with NTLM only ... the LAN MAN authentication set to ...
      (microsoft.public.exchange.admin)