Re: File/print sharing between 98/XP/2003 Mixed Domain

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 06/16/04


Date: Wed, 16 Jun 2004 01:16:52 GMT

Hi Wes.

First make sure that the 2 W2003 domain controller and the NT4.0 bdc are also wins
clients.

Then look at the KB's below. One on how to enable smb signing on a W98 computer and
the other on how to enable ntlmv2 on a W98 computer. I would not necessarily do that
on all the computers right away but test it on a couple.

http://support.microsoft.com/default.aspx?scid=kb;en-us;230545
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q239869

In addition for the mean time in both Domain Security Policy and Domain Controller
Security policy under security options disable both options Microsoft network client:
and server: digitally sign communications (always). Make sure to disable those two
options as not defined will not disable them. Run gpupdate /target:computer /force on
the domain controller when done and reboot a W2K/XP Pro computer to speed up policy
propagation on them.

I don't know if it will help, but it is worth a try as there are many security
options on a W2003 server that can possibly be a problem. By default all user right
assignments are configured in Domain Controller Security Policy but security options
are not except for maybe just a couple so you will have to look in Local Security
Policy on each domain controller to see how security options are configured but I
recommend you make changes in Domain Controller Security Policy so that they will
apply to all domain controllers and document the changes you make.

The link below will give you an idea of other incompatibilities in security policy
that can exist since you have both NT4.0 and W98 computers in the domain. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q239869 --- pay attention to
"examples of incompatibility problems".

"Wes Stewart" <wstewart@gmail.com> wrote in message
news:4179cd0a.0406151612.277be7d3@posting.google.com...
> I recently added two W2K3 Domain Controllers to my NT4 domain, thus I
> am running in Mixed Mode with the 2 W2K3 DC's and 1 NT4 BDC. I have
> several Windows 98SE clients that have shared printers. After the
> upgrade when users are trying to print to the shared W98 printers they
> are getting a request for an IPC$ password. I can disable and enable
> the sharing and users can sometimes print for a while then they are
> prompted for the password again.
>
> All clients are required to login to the domain, and they can access
> all of their mapped drives with no problems.
>
> I have installed the Hotfix W98 2003AD Client on both the system
> sharing the printer and the pc trying to connect to the printer.
> Sharing worked for about 15 minutes.
>
> From the W2K3 DC's or a XP machine I cannot connect to the shared
> printer or folders of a W98 machine, getting the IPC$ password prompt
> as well.
>
> WINS is setup & running on a third non-DC W2K3 server and the W98 PC's
> are showing up in the Active Registrations.
>
> I have now spent over 40 hours trying to figure this problem out, can
> anyone help?



Relevant Pages

  • Re: File/print sharing between 98/XP/2003 Mixed Domain
    ... > In addition for the mean time in both Domain Security Policy and Domain Controller ... >> All clients are required to login to the domain, ... >> sharing the printer and the pc trying to connect to the printer. ...
    (microsoft.public.win2000.networking)
  • Re: LM or NTLMv1 or NTLMv2
    ... > of LM or NTLM down-level clients or applications like ... > thousands of clients or applications so this needs to be ... > checked from the Domain Controller. ... > security policy' or other well-intentioned advice. ...
    (microsoft.public.win2000.security)
  • Re: Domain users unable to change password
    ... As I indicated, if the user logs onto the domain using an ICA or RDP client, ... I did notice that the Security Policy Setting for "Additional restrictions ... > Check their user accounts in AD Users and Computer to make sure that they ... > 2003 domain controller try running the Resultant Set of Policy mmc snapin ...
    (microsoft.public.windows.group_policy)
  • Re: issue accessing an AD server
    ... You can reset local security settings to default defined levels as described ... However on a domain controller, ... Security Policy will override user rights assignments. ... > restore the server from tape. ...
    (microsoft.public.win2000.security)
  • Re: security log anomolies
    ... object access in particular can generate a huge amount of events especially ... auditing of account logons would be most ... overriding Local Security Policy. ... controllers in particular as Domain Controller Security Policy will override ...
    (microsoft.public.win2000.security)