Discussion Locked

net use from 98 to NT

0 helpful
34 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hey folks. From a Windows 98/ME system, I
need to be able to map drives to shares on
servers in an NT domain. I do not want the
Windows 98/ME clients to actually join the
domain, however.

In WinNT, you can use the /user parameter of
the NET USE command to specify a user name to
connect as. However, there does not appear
to be a matching function in the Windows
98/ME net use command.

I have tried simply logging on locally to the
Win98 machine with a user name and password
that exists on the NT domain, thinking that
it would pass the credentials through.
However, it did not appear to work, and just
tells me that the password is incorrect.

A cool 1000 points to anyone who can tell me
how to map drives to these shares. Another
1000 points to anyone who can tell me how to
run domain admin apps (server mgr, user mgr)
from a Windows 98 system that does not belong
to the domain.

TIA

34 replies

by mphoffar

I don't beleieve there's a way to do this without some sort of help from the admins or some sort of 3rd party application.

The reason being is a 95/98/ME will want to make an IPC$ connection to the server instead of connection that NT or 2000 would make. You may be able to use something like
NTFSDOS Professional or NTFS for Windows 98 from www.sysinternals.com to help you come overcome this. The free versions are read only, but the fully registed will give you read\write. After that, you're looking at finding a way to translate the IPC share password from the remote systems, no administrator worth his weight will ever give you this, so you're probobly best off finding a 3rd party utility.

Good luck to you

Mark

by turambar386

hi.. just to clarify, I *am* the domain admin. I have the user names and passwords in the domain SAM that I want to use. The problem is that I cannot find any way for Win 98 to pass the credentials to the domain member without actually joining the domain.

by buffalodan

try this...

Have one win98 machine log on to the domain via a controlled account. Have a logon script that maps the drives you'd like shared to your choice of drive letters.
Also configure this domain machine to enable file sharing, and on the ID screen, configure a workgroup name.

After this controlled 98 machine has joined tha domain and mapped the drives, these network drives can then be shared to other 98 machines configured to join the same "workgroup" defined earlier, but not the domain. you can also assign password for the network drives shared by this win98 box.

it's not terribly secure, but the
net use \\win98_box\network_sharename will work from the command line, and the user will be prompted for a password, all without joining the domain.

Good Luck.

by turambar386

Thanks for the answer, Dan.
Unfortunately, these machines will be
connecting to the network via VPN (hence
the difficulty of making NT domain
logons). Because of this, it wouldn't
be possible for the various Win98 boxes
to communicate with each other.

by mancca74

Have you tried giving EVERONE Full control Rights to the folders? And activated the Guest Account in the Usermanager? Also RAS should be enabled in the Network.

This is highly unsecure and I personnally would not recommend doing any of this, since you're opening a back door for people onto your server.

The reason NT has the option Connect AS is because it establishes a relationship with the Server that allows it to access the network. WIN 9x does not do this.

by nmead

Are you trying to map drives to a member server or a DC? If member server, you will need a local user account and password on the server that matches the 'Windows Logon' username and password or the Novell Netware user/pass. If the shares are on a Domain Controller, you are SOL, although you ~might~ be able to host a DFS root on a member server, create a DFS Link to the share on the DC, load the DFS client on the PC and attach that way. Also, You can't run the Admin Tools from a 9x box NOT in the domain.

Why don't you use something like VNC to run the Admin apps over the VPN? It will help with the speed issue also...

hth,
Nate

by johnwood

hey dude . win 98 will only pass domain/user/password id if configured to join a domain. the good news is that you can set the os to join a domain, but you do not need to log on, if you get my drift.

you set up to join domain, reboot, and enter your user and password and domain. if it cannot find a dc cause you are on a vpn and trhe tunnel isn't up yet, it will just say it cannot find a dc. then you bring the tunnel up and do a net use and it will pass along the userid/pw/domain info. you just get the err msg when you logon, but at least not like nt or 2000 it lets you logon.

the same goes with the client admin apps.

jw

by soliboy

This is the type of thing I always call "Pushing a string uphill" and refuse to touch. How much more costly is a whole pile of leased lines...?!!

by michaeltubs

As long as you have the protocols loaded and the environment set you do not need to change Domains or Join the current Domain. Log into the machine as you normally would and do a computer search. the other domain will be present. You can map to an existing share but must have username and password to connect to that share. works in 2000 pro definitely.

by michaeltubs

95 Admin tools are on the Win server disk, using without joining the Domain as far as I know is not possible.

by rkelly

The simplest way to do this is to logon to Win98 with a username and password that exist on the domain. You do NOT have to logon to the domain, just use the same name and password.

Once you have done this ANY net use command will allow your machine to connect to any share that the domain based user would be able to connect to.

The feature that has been implemented in Windows NT that allows you connect to multiple locations using multiple logon has NOT been implemented in Windows 9x so hence there is no /user parameter for the net command.

As for the admin tools you will find the in the CLIENTS directory from the Windows NT Server CD. The same things as before apply, login as a user to the local machine with the same username and password as the domain based account that has administrative rights, then run user manager etc.

by rkelly

forgot to mention that you should try using the usernames as

DOMAIN\username

Thats the way that NT expects to see them.

by rkelly

Also is the resource on a member server? If it's on a member server then you could also create a local account on that machine that is exactly the same as the domain based account that should have access.

by mark phelan

First things First...

The Net Use and Net Logon commands

Firstly you would need to log on to the win 98 system as \\domain\username so that win98 knows all the required details for authentication.

Obviously you need to use an existing username and password.

Now, when using the net use command, win98 should pass the current authentication information to your NT server.

another way, If you are trying to produce a script, is to use "Net Logon" first.

One example may be along the following lines.

net logon user password /DOMAIN:domain /YES /SAVEPW:NO
net use Z \\domain\share
copy z:\filename.ext c:\junk\filename.ext
net use * /del
net logoff

This way you can perform all your scripted actions, and still leave the computer as a non domain member. (though why you would want to do this I dont know)

The nt admin tools can work in much the same way.

for example

net logon user password /DOMAIN:domain /YES /SAVEPW:NO
net use Z \\domain\share
rem start the server admin tool and wait for it to be shut down before continuing
start /w c:\nttools\servadm.exe
net logoff

Same principal, you have to be authenticated ont he domain before you can administer it.

Good luck :o)

by jgtyler

IT may be that NT is using plain text password, 95/98 and ME disabled plain text password authentication. To fix this, on the 98 computer.

1. Launch the Registry Editor as follows
Click on: /Start/Run
Type "regedit" and press Enter.

2. Double click on : HKEY_LOCAL_MACHINE

3. Locat the following key
/HKEY_LOCAL_MACHINE/System/CurrentControlSet/Services/VxD/VNETSUP

4. From the menu bar select Edit/New/DWORD Value

5. Rename the entry from "New Value #1" to EnablePlainTextPassword

6. Press Enter, then double click on the new entry. A dialog box will pop up and enable you to set a value. You must set this value to 1.

7. Reboot

** Note TechRepublic's dialog box auto-wraps

by charles_

Dude -- you were real close with logging onto the win98 machine with a user/pass that exists on the NT domain...

What you actually want to do is logon to the win98 machine with a user/pass that exists LOCALLY on the server with the shares.

It's a big pain and hassle -- but not too big, if it's just for a few users. On EVERY server with shares you want accessed, you need to create LOCAL users on those servers -- and give the proper permissions to the shares. Now when the win98 box sends the user/pass -- it just passes the logon info as a local user -- and it will work.

Using a domain user that has local permissions will NOT work (as you have seen.)

by turambar386

In a domain environment, this
shouldn't be necessary. Pass-thru
authentication should work fine.
Thanks, though!

by woody h

Here you go, done this with no problem.

1. Setup the computer using TCPIP.
2. Under the Identification tab, give the computer a name, and in the workgroup, put your domain name. This will allow you to be in your Workgroup and not the domain.Trust me, there is a workgroup out there.
3. Setup the computer for the Windows Login.
4. Reboot.
5. When the login comes up, type in the name and password of a domain user that you have setup.
6. Once you are logged into your computer, and have the VPN setup, you should be able to see the entire network.
7. Now you can use your net use commands to map drives to your server(s) that the domain users have accounts to.

As for the user and server manager programs. Not sure if this will work, but you can give it a shot. With the same configuration above, go into Add/Remove programs, click on Windows Setup, click on Have Disk, put in your NT Server disk, and point the browse to the folder that contains the setup for win 9x computers. This will install your server manager and user manager, then you should give it a shot. The way I see it, it should work as long as you log into the computer with a domain admin account.

This discussion is closed to new replies.