Re: File/print sharing between 98/XP/2003 Mixed Domain

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 06/16/04


Date: Wed, 16 Jun 2004 01:19:47 GMT

Oops. Last link is wrong. Here is correct one. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;823659

"Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
news:8cNzc.40479$eu.5442@attbi_s02...
> Hi Wes.
>
> First make sure that the 2 W2003 domain controller and the NT4.0 bdc are also wins
> clients.
>
> Then look at the KB's below. One on how to enable smb signing on a W98 computer and
> the other on how to enable ntlmv2 on a W98 computer. I would not necessarily do
that
> on all the computers right away but test it on a couple.
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;230545
> http://support.microsoft.com/default.aspx?scid=kb;en-us;Q239869
>
> In addition for the mean time in both Domain Security Policy and Domain Controller
> Security policy under security options disable both options Microsoft network
client:
> and server: digitally sign communications (always). Make sure to disable those two
> options as not defined will not disable them. Run gpupdate /target:computer /force
on
> the domain controller when done and reboot a W2K/XP Pro computer to speed up policy
> propagation on them.
>
> I don't know if it will help, but it is worth a try as there are many security
> options on a W2003 server that can possibly be a problem. By default all user right
> assignments are configured in Domain Controller Security Policy but security
options
> are not except for maybe just a couple so you will have to look in Local Security
> Policy on each domain controller to see how security options are configured but I
> recommend you make changes in Domain Controller Security Policy so that they will
> apply to all domain controllers and document the changes you make.
>
> The link below will give you an idea of other incompatibilities in security policy
> that can exist since you have both NT4.0 and W98 computers in the domain. ---
Steve
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;Q239869 --- pay attention
to
> "examples of incompatibility problems".
>
>
> "Wes Stewart" <wstewart@gmail.com> wrote in message
> news:4179cd0a.0406151612.277be7d3@posting.google.com...
> > I recently added two W2K3 Domain Controllers to my NT4 domain, thus I
> > am running in Mixed Mode with the 2 W2K3 DC's and 1 NT4 BDC. I have
> > several Windows 98SE clients that have shared printers. After the
> > upgrade when users are trying to print to the shared W98 printers they
> > are getting a request for an IPC$ password. I can disable and enable
> > the sharing and users can sometimes print for a while then they are
> > prompted for the password again.
> >
> > All clients are required to login to the domain, and they can access
> > all of their mapped drives with no problems.
> >
> > I have installed the Hotfix W98 2003AD Client on both the system
> > sharing the printer and the pc trying to connect to the printer.
> > Sharing worked for about 15 minutes.
> >
> > From the W2K3 DC's or a XP machine I cannot connect to the shared
> > printer or folders of a W98 machine, getting the IPC$ password prompt
> > as well.
> >
> > WINS is setup & running on a third non-DC W2K3 server and the W98 PC's
> > are showing up in the Active Registrations.
> >
> > I have now spent over 40 hours trying to figure this problem out, can
> > anyone help?
>
>



Relevant Pages

  • Re: Domain users unable to change password
    ... As I indicated, if the user logs onto the domain using an ICA or RDP client, ... I did notice that the Security Policy Setting for "Additional restrictions ... > Check their user accounts in AD Users and Computer to make sure that they ... > 2003 domain controller try running the Resultant Set of Policy mmc snapin ...
    (microsoft.public.windows.group_policy)
  • Re: issue accessing an AD server
    ... You can reset local security settings to default defined levels as described ... However on a domain controller, ... Security Policy will override user rights assignments. ... > restore the server from tape. ...
    (microsoft.public.win2000.security)
  • Re: File/print sharing between 98/XP/2003 Mixed Domain
    ... the other on how to enable ntlmv2 on a W98 computer. ... In addition for the mean time in both Domain Security Policy and Domain Controller ... > several Windows 98SE clients that have shared printers. ...
    (microsoft.public.win2000.networking)
  • Re: security log anomolies
    ... object access in particular can generate a huge amount of events especially ... auditing of account logons would be most ... overriding Local Security Policy. ... controllers in particular as Domain Controller Security Policy will override ...
    (microsoft.public.win2000.security)
  • Re: logon from the server machine !
    ... The default Domain Controller policy in Windows Server 2003 does not allow ... Security Policy setting. ... Policies/User Rights Assignment - and add the user to the Allow Local Logon ...
    (microsoft.public.windows.server.general)

Quantcast