Windows Forum

Ask something
Discussion Locked

Win2K server authenticating NT4.0wks

0 helpful
11 replies

by n8

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I am setting Win2K servers and I have several 4.0 clients. Can a 2000 server authenticate 4.0 client logons... The 2000 servers are just member servers and I do have a 4.0 server PDC.

11 replies

by ins413

I hate to be the bearer of bad news, but.... W2K Member servers are unable to validate log on requests. They are only Member servers. AD must be running on the member server, thus making them Domain Controllers. And thus, taking the top of the heirarchy of your domain. They are more tha capable of handling NT 4.0 authentication requests, but you gotta give a little to take a little. Sorry, but thats the way it (MS) works.

by kevin

Win2K can definitely authenticate NT4.0 clients. It has to be a domain controller which requires active directory. As member servers they will not be able to authenticate any logins.

by drdon

From your description, you will not be able to do what you are asking. If you have a NT 4.0 Domain with PDC and the Win 2000 servers are member servers of the Domain, then the Domain Controller authenticates the user. If you do not have a NT domain, then the first server in the Win 2000 is a DC and requires AD. You say the servers are member servers, what are they a member of? How many WIndows 2000 servers are you setting up? Either method will have no problem authenticating a NT 4.0 client.

by seth_lerman

Based on your statements above, there is nothing for you to do. All the authentication traffic was, and still is going to be handled by your 4.0 PDC (and BDCs if applicable). Member servers, like you describe your 2K servers to be, do not perform authentication, and therefore will not be an issue.

When you do decide to upgrade the DCs to 2K, you will need to upgrade the PDC first, followed by BDCs. DCPROMO will recognize that you already have a 4.0 infrastructure in place and suggest thatit be allowed to run "NT 4 compatibility mode" in order to continue authenticating legacy systems.

by sativocomputerservices

Yes... member servers canauthenticate 4.0 client requests using Share Level permissions. The only trick is that you must use your domains user accounts so the member server must be in the same domain as your DC. If you have no DC, then you can create local accounts on your member server and have your 4.0 workstations log in with those credentials. But you will have no problem.

This discussion is closed to new replies.