Undefined and disabled are not the same. Undefined means some lower level policy can define it. To see on a DC if it is truly defined or not open up secpol.msc and see the effective settings. Folks adding K3 DCs to 2K domains can run into fun with this because the K3 DCs can have SMB Signing required yet the domain policy could say undefined. I hit this in a lab and in production. Ended up setting the signing required settings to disabled.
------------- http://www.joeware.net (download joeware) http://www.cafeshops.com/joewarenet (wear joeware) -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Friday, April 16, 2004 4:45 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] win98 and win2ksp4 Both are set to "undefined". you'd think that'd be the same as "disabled". Actually, I don't see the exact settings he describes. Everyone is a member of the pre-winndows 2000 compatible access group. who knows whats going on here. its been a week of strange rights issues for me. thanks, i'm open to more suggestions. -----Original Message----- From: Mulnick, Al [mailto:[EMAIL PROTECTED] Sent: Friday, April 16, 2004 4:22 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] win98 and win2ksp4 IIRC, the issue is two GPO settings, not just the one. Name (DNS/WINS) resolution doesn't appear to be the issue. See http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&threadm=084901c3 5da8%249d9f5660%24a601280a%40phx.gbl&rnum=5&prev=/groups%3Fhl%3Den%26lr%3D%2 6ie%3DUTF-8%26oe%3DUTF-8%26q%3Dwindows%2B2003%2Bwindows%2B98%2BGPO I can't recall if all of those settings existed in 2K sp4 though. :) Al -----Original Message----- From: Kern, Tom [mailto:[EMAIL PROTECTED] Sent: Friday, April 16, 2004 12:51 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] win98 and win2ksp4 actually, the error is "username cannot be found". WINS is configured and running. I even made a #PRE and #DOM entries to the lmhosts file with the /1c and /1b netbios suffix for the pdc emulator dc which is running sp3. still same error. any suggestions? thanks -----Original Message----- From: Kern, Tom Sent: Friday, April 16, 2004 11:03 AM To: ActiveDir (E-mail) Subject: [ActiveDir] win98 and win2ksp4 I upgraded one win2k dc to sp4. my 2 other dc's are at sp3, this includes the 3 fsmo roles holder. since then, everytime i create a new user, if that user is logging in from a win98 box, they get a "network name cannot be found" error. the win98 box has the DSclient installed. the default domain controllers GPO for security is set to undefined(including"digitally encrypt...." tabs). what's the workaround(besides getting rid of any win98 clients. sigh, i wish)? thanks List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
