There's something wrong with your setup if removing NT4Emulator blew up your machine security connections. 2000 and newer should WANT to switch to Kerberos for authentication, unless you have something blocking it's use at the GPO level.
> > -----Original Message----- > From: Frank Boyd [mailto:[EMAIL PROTECTED] > Sent: 04 February 2008 16:05 > To: Active Directory Admin Issues > Subject: re: Raising Domain Functional Level > > We upgraded from NT4 to Win2K3 in July '05 with help from a consultant. > Last November I began the process of changing the functional level, and > discovered that the NT4Emulator setting was still enabled on the DCs. > Disabling the setting blew up all my Win2K and newer member computer > connections to the domain. Needless to say, in a healthcare > environment, that went over like a lead ballon. Not sure why the > setting was left enabled after the upgrade was complete and verified as > successful... Anyway, the setting is re-enabled now, and I'll have to > deal with it again soon. Any pointers would be appreciated. > > Any NT4 DCs out there? If so, no can do. If you have Win9x clients or > even WinNT member devices on the network, I would make sure they get > replaced first. Save yourself the aggravation of fighting those > headaches. ----- Salvador Manzo [ 620 W. 35th St - Los Angeles, CA 90089 e. [EMAIL PROTECTED] ] Auxiliary Services IT, Datacenter University of Southern California 818-612-5112 "Progress is made by lazy men looking for easier ways to do things." - Robert A. Heinlein ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~ ~ <http://www.sunbelt-software.com/product.cfm?id=400> ~
