Discussion Locked

Verifying which DC authenticated

0 helpful
10 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
How can I veryify which domain controller actually authenticated my NT workstation machines and W95/98 clients?

10 replies

by neal1lb

check the security log in the event viewer
for each controller. should tell you who
and when if it turned on.

by zk

For NT workstations, start>run>winmsd>network tab and at the bottom of it you will see logon server and that is the dc that autheticated the client. If you want the NT workstation to authenticate with a specific dc you can use setprfdc utility from sp4.

For 95/98 machines, I am not sure. I think it also depends on the node type settings (b or h) on wins. Don't quote me on that though. If there is a way to verify, I'd like to know as well.

by nascarjoe

For WIN95/98 machines you have to display the old 3.11 WFW logon message. Here goes:
Edit the Reg. Go to HKEY_LOCAL_MACHINE\NETWORK\LOGON\ and add a Dword value named DomainLogonMessage and then set the value to 1. every time you logon to a domain you will get a message telling you the domain, the server, and what access rights your userid has. I haven't tried this on NT Workstation yet but should work the same.

by ustutz

If you are running a logon script (BAT file), add the lines
echo %logonserver%
pause
to the script ("pause" waits for you to hit 'Enter' to continue). Note that the %logonserver% variable is set only during the logon process. Once logged on you can no longer recall that variable value from a dos window.

This discussion is closed to new replies.