RE: Windows 9X clients?

From: Joe Wu [MSFT] (joewu_at_online.microsoft.com)
Date: 02/13/04 

Date: Fri, 13 Feb 2004 20:55:36 GMT

Hello,

Thank you for your reply. The Windows 9X client should also work in the
Windows Server 2003 domain. However, if there are pre-Windows 2000 clients
in the Windows Server 2003 Active Directory, we generally suggest that we
do not configure too strict security settings, because they may cause
access restrictions.

Basically, if you encounter the following problems on Windows 98 clients
and other clients work well, we need the check the security settings on the
Windows Server 2003 domain controller.

- Receive an "Access Denied" error message on connecting a network share or
on a 'net view' command.

- Can successfully attach to the network share but receive an "Access
Denied" error message when trying to list the files using the DIR command.
Explorer shows an empty volume although you know that the share contains
folders and files.

- Windows 98 clients cannot join the domain.

My suggestions:

1. Please install Directory Services Client on these Windows 98 systems.

The Directory Services Client for Windows 9X systems is included on the
Windows 2000 CD-ROM as Clients\Win9x\Dsclient.exe. You can use it to
install DSClient on these Windows 9X clients. The NTLM 2 support will be
automatically installed as well.

We have an updated version of the Directory Services client as a hotfix.
Please refer to the following Knowledge Base article:

323466 Availability of the Directory Services Client Update for Windows 95
and
http://support.microsoft.com/?id=323466

If you do not have Windows 2000 installation CD or want updated version of
Directory Services Client, please contact our Microsoft Product Support
Services directly to obtain the latest Directory Services Client.

To obtain the phone numbers for specific technology request please take a
look at the web site listed below.

http://support.microsoft.com/default.aspx?scid=fh;EN-US;PHONENUMBERS

NOTE: If you contact Microsoft to obtain this fix, a fee may be charged.
However, unless you request additional technical support, this fee is
refundable.

2. Please check if your Windows 98 clients work well in the new domain. If
not, let's check the security settings under:

Domain Controller Security Policy\Security Settings\Local Policies\Security
Options

We need to pay more attention to the following:

2.1 SMB Signing:

SMB signing is initiated during SMB protocol negotiation. SMB signing
provides this authentication by placing a digital signature into each SMB,
which is then verified by both the client and the server. In order to use
SMB signing, you must either enable it or require it on both the SMB client
and the SMB server.

If SMB signing is required on a server, then a client will not be able to
establish a session unless it is at least enabled for SMB signing.

811497 Error Message When Windows 95 or Windows NT 4.0 Client Logs On to
http://support.microsoft.com/?id=811497

Microsoft network client: Digitally sign communications (always)
Microsoft network client: Digitally sign communications (if server agrees)
Microsoft network server: Digitally sign communications (always)
Microsoft network server: Digitally sign communications (if client agrees)
Domain member: Digitally encrypt or sign secure channel data (always)
Domain member: Digitally encrypt secure channel data (when possible)
Domain member: Digitally sign secure channel data (when possible)
Domain member: Require strong (Windows 2000 or later) session key

2.2 RestrictAnonymous

Anonymous connections are typically requested by downlevel clients during
SMB session setup.

Network access: Allow anonymous SID/Name translation
Network access: Do not allow anonymous enumeration of SAM accounts
Network access: Do not allow anonymous enumeration of SAM accounts and
shares
Network access: Let Everyone permissions apply to anonymous users
Network access: Named pipes can be accessed anonymously
Network access: Restrict anonymous access to Named Pipes and shares
Network access: Shares that can be accessed anonymously

3. Please also configure WINS in the new domain for name resolution.

Besides, the TechNet website contains a lot of good technical resource and
I believe they will be helpful to you:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechn
ol/windowsserver2003/default.asp

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechn
ol/ad/default.asp

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechn
ol/windows2000serv/default.asp

Thanks for using our newsgroups!

Regards,
Joe Wu
Product Support Services
Microsoft Corporation

Get Secure! - www.microsoft.com/security

====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
|Content-Class: urn:content-classes:message
|From: "sjs" <anonymous@discussions.microsoft.com>
|Sender: "sjs" <anonymous@discussions.microsoft.com>
|References: <d87a01c3f02b$d439bec0$a101280a@phx.gbl>
<QwvrCmK8DHA.1988@cpmsftngxa07.phx.gbl>
|Subject: RE: Windows 9X clients?
|Date: Wed, 11 Feb 2004 15:53:32 -0800
|Lines: 107
|Message-ID: <f0d401c3f0fa$41103fa0$a601280a@phx.gbl>
|MIME-Version: 1.0
|Content-Type: text/plain;
| charset="iso-8859-1"
|Content-Transfer-Encoding: 7bit
|X-Newsreader: Microsoft CDO for Windows 2000
|X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
|Thread-Index: AcPw+kEQVvsOFXkHTWSX41o+CVhYqw==
|Newsgroups: microsoft.public.windows.server.migration
|Path: cpmsftngxa07.phx.gbl
|Xref: cpmsftngxa07.phx.gbl microsoft.public.windows.server.migration:7739
|NNTP-Posting-Host: tk2msftngxa14.phx.gbl 10.40.1.166
|X-Tomcat-NG: microsoft.public.windows.server.migration
|
|Joe,
|
|You and Tom are above my level concerning the topic. I
|have a single NT 4.0 domain located in one building,
|nothing fancy...I have 20 some XP workstations but five
|98 that my boss won't give me the cash to upgrade. Will
|the 98 workstations work once I upgrade fm NT 4.0 to 2003?
|
|As a bonus question, is there simple (yeah, right!)
|documentation that will provide me high level steps to
|upgrade fm NT 4.0 to 2003 and Exchange 5.5 to Exchange
|2003?
|
|thanks!!
|steve
|>-----Original Message-----
|>Hello,
|>
|>Thank you for your post.
|>
|>We can install Directory Services Client on these
|Windows 98 systems.
|>
|>The Directory Services Client for Windows 9X systems is
|included on the
|>Windows 2000 CD-ROM as Clients\Win9x\Dsclient.exe. You
|can use it to
|>install DSClient on these Windows 9X clients. The NTLM 2
|support will be
|>automatically installed as well.
|>
|>We have an updated version of the Directory Services
|client as a hotfix.
|>Please refer to the following Knowledge Base article:
|>
|>323466 Availability of the Directory Services Client
|Update for Windows 95
|>and
|>http://support.microsoft.com/?id=323466
|>
|>If you do not have Windows 2000 installation CD or want
|updated version of
|>Directory Services Client, please contact our Microsoft
|Product Support
|>Services directly to obtain the latest Directory
|Services Client.
|>
|>To obtain the phone numbers for specific technology
|request please take a
|>look at the web site listed below.
|>
|>http://support.microsoft.com/default.aspx?scid=fh;EN-
|US;PHONENUMBERS
|>
|>NOTE: If you contact Microsoft to obtain this fix, a fee
|may be charged.
|>However, unless you request additional technical
|support, this fee is
|>refundable.
|>
|>I hope this inforamtion helps. Thanks!
|>
|>Regards,
|>Joe Wu
|>Product Support Services
|>Microsoft Corporation
|>
|>Get Secure! - www.microsoft.com/security
|>
|>====================================================
|>When responding to posts, please "Reply to Group" via
|your newsreader so
|>that others may learn and benefit from your issue.
|>====================================================
|>This posting is provided "AS IS" with no warranties, and
|confers no rights.
|>
|>--------------------
|>|Content-Class: urn:content-classes:message
|>|From: "Tom" <anonymous@discussions.microsoft.com>
|>|Sender: "Tom" <anonymous@discussions.microsoft.com>
|>|Subject: Windows 9X clients?
|>|Date: Tue, 10 Feb 2004 15:15:53 -0800
|>|Lines: 4
|>|Message-ID: <d87a01c3f02b$d439bec0$a101280a@phx.gbl>
|>|MIME-Version: 1.0
|>|Content-Type: text/plain;
|>| charset="iso-8859-1"
|>|Content-Transfer-Encoding: 7bit
|>|X-Newsreader: Microsoft CDO for Windows 2000
|>|Thread-Index: AcPwK9Q5qkeGU9kUTwGoJyBqVmVjOg==
|>|X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
|>|Newsgroups: microsoft.public.windows.server.migration
|>|Path: cpmsftngxa07.phx.gbl
|>|Xref: cpmsftngxa07.phx.gbl
|microsoft.public.windows.server.migration:7706
|>|NNTP-Posting-Host: tk2msftngxa09.phx.gbl 10.40.1.161
|>|X-Tomcat-NG: microsoft.public.windows.server.migration
|>|
|>|Was there not a connector or something like that for
|>|clients that were not 2000pro & Xp? (for logging into
|>|2003 server)
|>|Tom
|>|
|>
|>.
|>
|

Relevant Pages

  • RE: Printing from Win9x clients stops
    ... The printers with 9x drivers on the server appeared automatically in the ... > then right-click the name of the computer running Windows Small Business ... > From the client computer: ... The Select Network Component Type ...
    (microsoft.public.windows.server.sbs)
  • Re: DHCP Issues. Very strange
    ... I understand the issue to be: some client computers ... can not obtain IP from SBS server. ... it is most possible a client side issue of Windows ... since you have join it to SBS domain and the Windows XP SP2 ...
    (microsoft.public.windows.server.sbs)
  • Site-tosite VPN Issue
    ... Windows Server 2003 domain controller ... Mixture of PCs running Windows 2000 Profressional with SP3 and Windows XP ... the VPN to the Windows Server 2003 domain controller. ... 12.7MB file from the server to the client PC. ...
    (microsoft.public.windows.server.networking)
  • Authentication flaw in microsoft SMB protocol
    ... Microsoft uses SMB Protocol for “File and Printer sharing service” in all ... Authentication is used to authenticate the client on the server. ... logged-in user requests for a network share on the server, Windows ...
    (Bugtraq)
  • RE: Printing from Win9x clients stops
    ... Open Server Management. ... then right-click the name of the computer running Windows Small Business ... >From the client computer: ... The Select Network Component Type ...
    (microsoft.public.windows.server.sbs)