Re: Trust Problem

From: Bob Qin [MSFT] (bobqin_at_online.microsoft.com)
Date: 06/08/04


Date: Tue, 08 Jun 2004 11:34:31 GMT

Hi Dave,

Please check if the following setting is enabled in a GPO that applied to
the Windows Server 2003 DC.

Microsoft network client: Digitally sign communications (always)

The full path is Computer Settings\Securoty Settings\Local
Policies\Security Options

If enabled, disable the setting and restart the workstation service or
reboot the DC's after replication has finished. Please also check the
default domain policy and default domain controller policy for this setting.

In addition, please try the following steps to dibble RestrictAnonymous on
Windows Server 2003.

Open regedt32
Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
Double-click the "RestrictAnonymous" registry value, change the value to
zero (0), and then click OK.
Reboot the server

Wish it helps.

Regards,
Bob Qin
Product Support Services
Microsoft Corporation

Get Secure! - www.microsoft.com/security

====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



Relevant Pages

  • Re: Trust Problem
    ... >the Windows Server 2003 DC. ... >reboot the DC's after replication has finished. ... >default domain policy and default domain controller ... >Product Support Services ...
    (microsoft.public.windows.server.migration)
  • Re: In-place upgrade from NT to 2003, member server question
    ... I'm aware of the NT4Emulator key, but this is not the answer that I'm ... You say that "based on your experience, you needen't reboot the win2k member ... > use Windows Server 2003 interim Functional Level. ... > sufficient Windows 2k3 domain controllers, ...
    (microsoft.public.windows.server.migration)
  • Re: Odd DNS issue
    ... netsh interface tcp set global autotuninglevel=disabled ... Reboot the machine. ... Windows Server 2003 with Service Pack 2 ... Disable RSS in the Registry ...
    (microsoft.public.windows.server.dns)
  • Re: Odd DNS issue
    ... netsh interface tcp set global autotuninglevel=disabled ... Reboot the machine. ... Windows Server 2003 with Service Pack 2 ... Disable RSS in the Registry ...
    (microsoft.public.windows.server.dns)
  • RE: how to prevent windows server from automatically restarting
    ... With group policy you can supposedly tell it not to do a reboot until you ... Restart Required: To complete the installation of the following updates, ... Security Update for Windows Server 2003 ...
    (microsoft.public.windows.server.general)