Downlevel clients (win9x/nt) do not support NTLMV2 authentication unless you install the "Active Directory Client Extensions for Windows 95/98 and Windows NT 4.0" on the client machines.
NTLMV2 is not turned on by default on Windows 2000, but maybe Windows 2003 turns it on automatically? If so, you can download the AD Client Extensions from here: http://www.microsoft.com/windows2000/server/evaluation/news/bulletins/adextension.asp HTH, -Mike On Wed, Mar 31, 2004 at 04:21:09PM +0200, Peter Johnson wrote: > ... > 4.) DCPROMO the new Windows 2003 server. > > > > The moment step 4 happens none of my Windows 98 machines can login to > the domain. I get an error message that The password is incorrect or > access to logon server has been denied. > > > > After reading through the sparse documentation I installed the > DSCLIENT2003 that I got from PSS as well as IE 6.0 SP1 and turned on > NTLMV2 authentication and turned off SMB signing on the DC's. None of > these steps made any difference. The moment I demoted the Windows 2003 > DC to a member server the problem disappeared. I've not gone any further > with the process since then, > > List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
