| Author |
Message |
Percy
Guest
|
 Posted:
Mon Jan 17, 2005 10:43 am Post subject:
NT4 to Windows 2003 AD Migration |
|
|
I am doing an in place upggrade of NT4 PDC to W2K3 AD.
I have Windows 95 machines and I am concerned about them loggin in after the
upgrade.
Is it absoluetly necessary to the AD Cleint extensions for the 95 machines?
Also any DNS issues I shoud be worrid about?
Thanks! |
|
| Back to top |
|
 |
Rebecca Chen [MSFT]
Guest
|
| Posted:
Mon Jan 17, 2005 5:00 pm Post subject:
RE: NT4 to Windows 2003 AD Migration |
|
|
Hi Percy,
You will encounter some problems when win95/win98/ME system logon to the
win2k3 domain.
By default, security settings on domain controllers running Windows Server
2003 are configured to help prevent domain controller communications from
being intercepted or tampered with by malicious users. For users to
successfully negotiate communications with a domain controller that runs
Windows Server 2003, these default security settings require that client
computers use both server message block (SMB) signing and encryption or
signing of secure channel traffic. Clients that run Windows NT 4.0 with SP2
or earlier installed and clients that run Windows 95 do not have SMB packet
signing enabled and cannot authenticate to a Windows Server 2003 domain
controller.
I strongly recommend you carefully read the following article before you
upgrade the domain to win2k3:
How to enable Windows 98/ME/NT clients to logon to Windows 2003 based
Domains
http://support.microsoft.com/?kbid=555038
from the article above, you need to install DSclient on win95/win98/ME
system.
In addition, you may also encounter the following issues:
Error Message When Windows 95 or Windows NT 4.0 Client Logs On to Windows
Server 2003 Domain
http://support.microsoft.com/default.aspx?scid=kb;en-us;811497&FR=1&PA=1&SD=
HSCH
272594 Problems logging on to a Windows 2000-based server or a Windows
http://support.microsoft.com/?id=272594
I possible, I would like to suggest you upgrade the win95 clients to WinXP
since win95/win98 is out of its lifecycle and not fully support AD network
environment.
HTH!
Best regards,
Rebecca Chen
MCSE2000 MCDBA CCNA
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights. |
|
| Back to top |
|
|
Percy
Guest
|
| Posted:
Mon Jan 17, 2005 6:14 pm Post subject:
RE: NT4 to Windows 2003 AD Migration |
|
|
Thanks for the reply.
I cannot upgrade the 95 machines because of properiatary applications that
rely on them. We have several hundred 95 machines that canot be upgraded.
I could install 2000 and later upgrade to 2003 would that help? I have had
no problem with 98 and NT4 wrkst SP6 and 2000 AD domains.
If not then my only choice will be to add the AD client extensions to all
machines?
Thanks!
"Rebecca Chen [MSFT]" wrote:
| Quote: | Hi Percy,
You will encounter some problems when win95/win98/ME system logon to the
win2k3 domain.
By default, security settings on domain controllers running Windows Server
2003 are configured to help prevent domain controller communications from
being intercepted or tampered with by malicious users. For users to
successfully negotiate communications with a domain controller that runs
Windows Server 2003, these default security settings require that client
computers use both server message block (SMB) signing and encryption or
signing of secure channel traffic. Clients that run Windows NT 4.0 with SP2
or earlier installed and clients that run Windows 95 do not have SMB packet
signing enabled and cannot authenticate to a Windows Server 2003 domain
controller.
I strongly recommend you carefully read the following article before you
upgrade the domain to win2k3:
How to enable Windows 98/ME/NT clients to logon to Windows 2003 based
Domains
http://support.microsoft.com/?kbid=555038
from the article above, you need to install DSclient on win95/win98/ME
system.
In addition, you may also encounter the following issues:
Error Message When Windows 95 or Windows NT 4.0 Client Logs On to Windows
Server 2003 Domain
http://support.microsoft.com/default.aspx?scid=kb;en-us;811497&FR=1&PA=1&SD=
HSCH
272594 Problems logging on to a Windows 2000-based server or a Windows
http://support.microsoft.com/?id=272594
I possible, I would like to suggest you upgrade the win95 clients to WinXP
since win95/win98 is out of its lifecycle and not fully support AD network
environment.
HTH!
Best regards,
Rebecca Chen
MCSE2000 MCDBA CCNA
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
|
|
|
| Back to top |
|
|
Rebecca Chen [MSFT]
Guest
|
| Posted:
Tue Jan 18, 2005 7:18 pm Post subject:
RE: NT4 to Windows 2003 AD Migration |
|
|
Hi Percy,
Frankly, I don't believe upgrade to win2k and then win2k3 will help since
when you upgrade win2k3, the system structure will been changed eventually.
It seems the third-party application is the main reason to reply on win95,
is it possible to get the new version of this applications ? You may choose
to stick to the current system for a period of time. However, it is not a
final resolution since you will not upgrade to win2k3 system and the future
system to take the advantage from them.
With regards to the Dsclient, yes, it will be helpful if you install
DSclient on win95 machine.as a temp workaround However, I believe
eventually to upgrade the application which is compatible with win2k3
server and upgrade win95 system.
Any update, let us get in touch!
Best regards,
Rebecca Chen
MCSE2000 MCDBA CCNA
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights. |
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in