RE: Windows 95 - DSCLIENT

From: MLH (MLH_at_discussions.microsoft.com)
Date: 11/12/04 

Date: Fri, 12 Nov 2004 14:44:02 -0800

Also, your nt 4 pcs should be fine as well as any win 98 SECOND edition pcs.
You may need the dsclient for any win 98 First edition.

"Carsyn Gu [MSFT]" wrote:

> Hi Ray,
>
> Thanks for the posting.
>
> Windows 95 clients will get "Domain password is suppled is incorrect or the
> logon server
> has denied access" message trying to login to 2003 domain.
>
> The following security policies which may cause Windows 95 cannot logon to
> domain.
>
> In the Windows 2003 Default Domain Controllers policy:
> A. Domain member: Digitally encrypt or sign secure channel data (always)
> Disabled
> B. Microsoft network client: Digitally sign communications (always) Disabled
> C. Microsoft network server: Digitally sign communications (always) Disabled
> D. Network access: Do not allow anonymous enumeration of SAM accounts
> Disabled
> E. Network access: Do not allow anonymous enumeration of SAM accounts and
> shares
> Disabled
> F. Network access: Let Everyone permissions apply to anonymous users Enabled
> G. Network access: Restrict anonymous access to Named Pipes and Shares
> Disabled
> H. Network security: Do not store LAN Manager hash value on next password
> change
> Disabled
> I. Network security: LAN Manager authentication level Send LM and NTLM
> Responses
>
> Resolution
> ==========
>
> DCs need policy refresh and reboot (LSA policy changes)
>
> On the Win 95 Client:
> http://download.microsoft.com/download/0/0/A/00A7161E-8DA8-4C44-B74E-469D769
> CE96E/ds
> client9x.msi
> *** NOTE ***
> Also need to get Windows Installer
> Windows Installer 2.0 Redistributable for Windows 95, 98, and Me
> http://www.microsoft.com/downloads/details.aspx?FamilyID=cebbacd8-c094-4255-
> b702-de3
> bb768148f&DisplayLang=en
>
> NOTE - When you run the .MSI file, it simply extracts an EXE that then also
> needs
> to be run to actually install the client!
>
> Related links:
>
> 823659 Client, service, and program incompatibilities that may occur when
> you
> http://support.microsoft.com/?id=823659
> 811497 Error Message When Windows 95 or Windows NT 4.0 Client Logs On to
> http://support.microsoft.com/?id=811497
> 325363 How To Add Users to the Pre-Windows 2000 Compatible Access Group in
> http://support.microsoft.com/?id=325363
> 288358 How to install the Active Directory client extension
> http://support.microsoft.com/?id=288358
> Microsoft L2TP/IPSec VPN Client (Win98 or higher)
> http://www.microsoft.com/windows2000/server/evaluation/news/bulletins/l2tpcl
> ient.asp
>
> Hope the information above helps! Looking forward to your reply.
>
>
> Sincerely,
> Carsyn Gu
> Microsoft Online Partner Support
>
> Get Secure! - www.microsoft.com/security
>
> =====================================================
> When responding to posts, please "Reply to Group" via
> your newsreader so that others may learn and benefit
> from your issue.
> =====================================================
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> --------------------
> | From: <Ray>
> | Subject: Windows 95 - DSCLIENT
> | Date: Tue, 9 Nov 2004 09:57:52 -0000
> | Lines: 17
> | X-Priority: 3
> | X-MSMail-Priority: Normal
> | X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
> | X-RFC2646: Format=Flowed; Original
> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
> | Message-ID: <uhqr5JkxEHA.3276@TK2MSFTNGP15.phx.gbl>
> | Newsgroups: microsoft.public.windows.server.migration
> | NNTP-Posting-Host: host81-154-167-5.range81-154.btcentralplus.com
> 81.154.167.5
> | Path:
> cpmsftngxa10.phx.gbl!TK2MSFTNGXA03.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP15
> .phx.gbl
> | Xref: cpmsftngxa10.phx.gbl microsoft.public.windows.server.migration:15109
> | X-Tomcat-NG: microsoft.public.windows.server.migration
> |
> | I will be carrying out an inplace upgrade from NT4 to W2k3 Active
> Directory.
> |
> | I currently have many Windows 95 client machines.
> | Would i be correct to say that my Windows 95 client machines will not be
> | able to log into the new W2K3 AD server after the upgrade.
> |
> | Will i need to install the DSCLIENT on all w95 machines.....
> |
> | Can you give me the link to install the dsclinet software on Windows 95
> | machines.....
> |
> | I alson have W98 and NT..SP4....but assuming these clients will be
> | fine.....please confirm
> |
> | Cheers Ray
> |
> |
> |
>
>

Relevant Pages

  • Re: AW: IDS
    ... These are implementations that first put the client in a quarantine VLAN, then check the client and push the needed updates to the client. ... the port of the switch or the desktop-firewall-policy will grant the network access. ... In addition to the products that Frank mentioned above, you might also want to take a look at Forescout's CounterACT which in addition to providing NAC services, can also block fast propagating malware on your network. ...
    (Focus-IDS)
  • RE: Windows 95 - DSCLIENT
    ... I think you will only need to install the dsclient on your 95 ... > B. Microsoft network client: ... > D. Network access: Do not allow anonymous enumeration of SAM accounts ...
    (microsoft.public.windows.server.migration)
  • RE: win95 clients in a 2003 AD DOMAIN
    ... The Windows 9X client should also work in the Windows Server 2003 domain. ... Network access: Do not allow anonymous enumeration of SAM accounts ...
    (microsoft.public.windows.server.migration)
  • Re: SMS 2003 Client Push Problems
    ... In case of push, the network access for the client.msi is done as follows ... If the network access account is provided then that is used to connect to ... then an anonymous network access is made to the Client ...
    (microsoft.public.sms.admin)
  • Re: Access Denied Browsing Solution
    ... >I then went into Local Security Policy and set: ... >Network Access: Do not allow anonymous enumeration of SAM ... registry keys do, and if they are the same as the LSP settings. ...
    (microsoft.public.windowsxp.network_web)
Loading