Here's the LAN Manager Hash article:
How to Prevent Windows from Storing a LAN Manager Hash of Your Password in
Active Directory and Local SAM Databases
http://support.microsoft.com:80/support/kb/articles/q299/6/56.asp


You didn't say if you have AD2K or AD2003 - but:
Check these settings in the Group Policy:

Microsoft network server: Digitally sign communications (always)
That is for SMB packet signing, Windows 98 has to be told to support that
and I believe it is enabled by default in AD2003.

And the following TechNet article:
How to Enable SMB Signing in Windows 98:
http://support.microsoft.com:80/support/kb/articles/Q230/5/45.asp

Hope that helps 
Rich

-----Original Message-----
From: Bridges, Samantha [mailto:[EMAIL PROTECTED] 
Sent: Friday, November 14, 2003 9:19 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Window 98 Desktops are being locked out

Since our AD upgrade, all of the Windows 98 machines have been having
problems with authentication.  Seems that if a windows 98 machines hits
a Active Directory DC for authentication, it will lockout the machine.
If the Windows 98 machines gets a Windows NT 4.0 server it authenticates
with no problem.

Anyone ever heard of this and do you know of a possible fix.  

Thanks

Samantha
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
-------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE-------
PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or
any attachments. This information is strictly confidential and may be
subject to attorney-client privilege. This message is intended only for the
use of the named addressee. If you are not the intended recipient of this
message, unauthorized forwarding, printing, copying, distribution, or using
such information is strictly prohibited and may be unlawful. If you have
received this in error, you should kindly notify the sender by reply e-mail
and immediately destroy this message. Unauthorized interception of this
e-mail is a violation of federal criminal law. Applebee's International,
Inc. reserves the right to monitor and review the content of all messages
sent to and from this e-mail address. Messages sent to or from this e-mail
address may be stored on the Applebee's International, Inc. e-mail system.
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to