Windows Forum

Ask something
Discussion Locked

Domain User Login Problems

0 helpful
4 replies

by will.randall

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hello all...I have recently had a problem with users being able to authenticate against the domain. I have an NT 4.0 Svc Pk 6a PDC that authenticates Win95/98, NT 4.0 and Win 2000 clients. Out of the clear blue (it seems) the 95/98 clients can no longer access the domain. They receive a notice stating their password is incorrect. Changing the passwords in User Manager results in the same message. Funny enough, though, the same users can log in from a Win 2000 or NT 4.0 W.S. machine. It isalmost as if the SAM will only allow clients that have an actual machine account to log in and NOT clients who attempt a login using User account only (such as a Win95/98 machine). And ti gets even better in that if I add the Domain Users group tothe Administrators group the Win95/98 clients can log in OK. Crazy!

Does anyone have any help or suggestions?

Thanks!

-Will

4 replies

by some guy in seattle

have you made any security changes for log-on authentication (NT lan manager vs. lan manager)? To disable the effectiveness of password auditing programs like l0phtcrack some admins disable ordinary lan manager authentication, but this, unfortunately, prevents Win 95/98 machines from participating in a domain. For more info, see MS KB article Q147706.

Hope that helps,

by will.randall

I closed this call myself after resolving the problem...one of our other "administrators" had removed the "Everyone" group from the User Right to log in to the computer (i.e., the PDC!). Since the Win2000 clients use the machine name instead of theuser account to validate domain login, the only clients unable to login were the 95/98 clients. Whoops!

Thanks!

This discussion is closed to new replies.