| Author |
Message |
Paul Bergson
Guest
|
 Posted:
Fri Nov 04, 2005 5:50 pm Post subject:
2003 Connection attempt to NT4 domain |
|
|
I'm stumped. I have an NT4 domain without any type of trust. I'm
attempting to run User Manager or Server Manager to attach to this domain.
So far I have had no success.
I have attached to the remote domain via share connection and authenticated.
I then attempt to run User Manager that I have loaded from the 2003 Resource
Kit on my 2003 server (Attempted on 2000 server as well). Both servers are
fully patched.
194.126.18.99 PDC_NT #PRE #DOM:NT_DOMAIN
194.126.18.99 "NT_DOMAIN \0x1b" #PRE
# IP Address "123456789012345*7890"
nbtstat -R
nbtstat -c
results
PDC_NT <03> UNIQUE 194.126.18.99 -1
PDC_NT <00> UNIQUE 194.126.18.99 -1
PDC_NT <20> UNIQUE 194.126.18.99 -1
NT_DOMAIN <1C> GROUP 194.126.18.99 -1
NT_DOMAIN <1B> UNIQUE 194.126.18.99 -1
When I attempt to connect, I get the error "Cannot find the Primary DC for
NT_DOMAIN. You may administer this domain, but certain domain-wide
operations will be disabled."
Is there some issue with NTLM on my servers that are disabled due to
patching/policies? How can I track this down. I'm just plain stumped?
--
Paul
cross posted
microsoft.public.windows.server.active_directory
microsoft.public.win2000.active_directory |
|
| Back to top |
|
 |
Ace Fekay [MVP]
Guest
|
| Posted:
Mon Nov 07, 2005 9:51 am Post subject:
Re: 2003 Connection attempt to NT4 domain |
|
|
In news:O1pI3TW4FHA.1420@TK2MSFTNGP09.phx.gbl,
Paul Bergson <pbergson@allete_nospam.com> made this post, which I then
commented about below:
| Quote: | I'm stumped. I have an NT4 domain without any type of trust. I'm
attempting to run User Manager or Server Manager to attach to this
domain. So far I have had no success.
I have attached to the remote domain via share connection and
authenticated. I then attempt to run User Manager that I have loaded
from the 2003 Resource Kit on my 2003 server (Attempted on 2000
server as well). Both servers are fully patched.
194.126.18.99 PDC_NT #PRE #DOM:NT_DOMAIN
194.126.18.99 "NT_DOMAIN \0x1b" #PRE
# IP Address "123456789012345*7890"
nbtstat -R
nbtstat -c
results
PDC_NT <03> UNIQUE 194.126.18.99 -1
PDC_NT <00> UNIQUE 194.126.18.99 -1
PDC_NT <20> UNIQUE 194.126.18.99 -1
NT_DOMAIN <1C> GROUP 194.126.18.99 -1
NT_DOMAIN <1B> UNIQUE 194.126.18.99 -1
When I attempt to connect, I get the error "Cannot find the Primary
DC for NT_DOMAIN. You may administer this domain, but certain
domain-wide operations will be disabled."
Is there some issue with NTLM on my servers that are disabled due to
patching/policies? How can I track this down. I'm just plain
stumped?
|
Set the workaround shown in this link to disable SMB Signing ('always' to
'disabled'), then run:
gpupdate /force.
811497 - Error Message When Windows 95 or Windows NT 4.0 Client Logs On to
Windows Server 2003 Domain:
http://support.microsoft.com/?id=811497
--
Ace
This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.
If this post is viewed at a non-Microsoft community website, and you were to
respond to it through that community's website, I may not see your reply
unless that website posts replies back to the original Microsoft forum.
Therefore, please direct all replies ONLY to the Microsoft public newsgroup
this thread originated in so all can benefit or ensure the web community
posts it back to the original forum.
Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Windows Server Directory Services
Microsoft Certified Trainer
Infinite Diversities in Infinite Combinations.
================================= |
|
| Back to top |
|
|
Paul Bergson
Guest
|
| Posted:
Tue Nov 08, 2005 9:51 pm Post subject:
Re: 2003 Connection attempt to NT4 domain |
|
|
I appreciate the effort but it is my 2003 server that can't connect to an NT
4.0 PDC.
--
Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
This posting is provided "AS IS" with no warranties, and confers no rights.
"Ace Fekay [MVP]"
<PleaseSubstituteMyActualFirstName&LastNameHere@hotmail.com> wrote in
message news:uGryCz14FHA.3136@TK2MSFTNGP09.phx.gbl...
| Quote: | In news:O1pI3TW4FHA.1420@TK2MSFTNGP09.phx.gbl,
Paul Bergson <pbergson@allete_nospam.com> made this post, which I then
commented about below:
I'm stumped. I have an NT4 domain without any type of trust. I'm
attempting to run User Manager or Server Manager to attach to this
domain. So far I have had no success.
I have attached to the remote domain via share connection and
authenticated. I then attempt to run User Manager that I have loaded
from the 2003 Resource Kit on my 2003 server (Attempted on 2000
server as well). Both servers are fully patched.
194.126.18.99 PDC_NT #PRE #DOM:NT_DOMAIN
194.126.18.99 "NT_DOMAIN \0x1b" #PRE
# IP Address "123456789012345*7890"
nbtstat -R
nbtstat -c
results
PDC_NT <03> UNIQUE 194.126.18.99 -1
PDC_NT <00> UNIQUE 194.126.18.99 -1
PDC_NT <20> UNIQUE 194.126.18.99 -1
NT_DOMAIN <1C> GROUP 194.126.18.99 -1
NT_DOMAIN <1B> UNIQUE 194.126.18.99 -1
When I attempt to connect, I get the error "Cannot find the Primary
DC for NT_DOMAIN. You may administer this domain, but certain
domain-wide operations will be disabled."
Is there some issue with NTLM on my servers that are disabled due to
patching/policies? How can I track this down. I'm just plain
stumped?
Set the workaround shown in this link to disable SMB Signing ('always' to
'disabled'), then run:
gpupdate /force.
811497 - Error Message When Windows 95 or Windows NT 4.0 Client Logs On to
Windows Server 2003 Domain:
http://support.microsoft.com/?id=811497
--
Ace
This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.
If this post is viewed at a non-Microsoft community website, and you were
to respond to it through that community's website, I may not see your
reply unless that website posts replies back to the original Microsoft
forum. Therefore, please direct all replies ONLY to the Microsoft public
newsgroup this thread originated in so all can benefit or ensure the web
community posts it back to the original forum.
Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Windows Server Directory Services
Microsoft Certified Trainer
Infinite Diversities in Infinite Combinations.
=================================
|
|
|
| Back to top |
|
|
Ace Fekay [MVP]
Guest
|
| Posted:
Wed Nov 09, 2005 9:51 am Post subject:
Re: 2003 Connection attempt to NT4 domain |
|
|
In news:ud13d3J5FHA.3976@TK2MSFTNGP15.phx.gbl,
Paul Bergson <pbergson@allete_nospam.com> made this post, which I then
commented about below:
| Quote: | I appreciate the effort but it is my 2003 server that can't connect
to an NT 4.0 PDC.
|
Sorry to hear. I may suggest to create a trust and try it just to see if
that works.
Ace |
|
| Back to top |
|
|
Paul Bergson
Guest
|
| Posted:
Wed Nov 09, 2005 1:50 pm Post subject:
Re: 2003 Connection attempt to NT4 domain |
|
|
Actually that is my goal. I was hoping to get this working first.
--
Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
This posting is provided "AS IS" with no warranties, and confers no rights.
"Ace Fekay [MVP]"
<PleaseSubstituteMyActualFirstName&LastNameHere@hotmail.com> wrote in
message news:OJXb1GP5FHA.3876@TK2MSFTNGP09.phx.gbl...
| Quote: | In news:ud13d3J5FHA.3976@TK2MSFTNGP15.phx.gbl,
Paul Bergson <pbergson@allete_nospam.com> made this post, which I then
commented about below:
I appreciate the effort but it is my 2003 server that can't connect
to an NT 4.0 PDC.
Sorry to hear. I may suggest to create a trust and try it just to see if
that works.
Ace
|
|
|
| Back to top |
|
|
Ace Fekay [MVP]
Guest
|
| Posted:
Thu Nov 10, 2005 1:51 am Post subject:
Re: 2003 Connection attempt to NT4 domain |
|
|
In news:OdMGkDT5FHA.432@TK2MSFTNGP09.phx.gbl,
Paul Bergson <pbergson@allete_nospam.com> made this post, which I then
commented about below:
| Quote: | Actually that is my goal. I was hoping to get this working first.
|
I'm not sure, and haven't tested it out, but I believe this may be a chicken
before the egg issue, if you know what I mean.
Ace |
|
| Back to top |
|
|
Paul Bergson
Guest
|
| Posted:
Thu Nov 10, 2005 1:50 pm Post subject:
Re: 2003 Connection attempt to NT4 domain |
|
|
It is so weird having to go back so far to get this company into our wan.
--
Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
This posting is provided "AS IS" with no warranties, and confers no rights.
"Ace Fekay [MVP]"
<PleaseSubstituteMyActualFirstName&LastNameHere@hotmail.com> wrote in
message news:uojuBCY5FHA.1248@TK2MSFTNGP14.phx.gbl...
| Quote: | In news:OdMGkDT5FHA.432@TK2MSFTNGP09.phx.gbl,
Paul Bergson <pbergson@allete_nospam.com> made this post, which I then
commented about below:
Actually that is my goal. I was hoping to get this working first.
I'm not sure, and haven't tested it out, but I believe this may be a
chicken before the egg issue, if you know what I mean.
Ace
|
|
|
| Back to top |
|
|
Paul Bergson
Guest
|
| Posted:
Thu Nov 10, 2005 9:50 pm Post subject:
Re: 2003 Connection attempt to NT4 domain |
|
|
My network guy fessed up to blocking ports 137 and 138. I got them open and
whah lah...
--
Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
This posting is provided "AS IS" with no warranties, and confers no rights.
"Paul Bergson" <pbergson@allete_nospam.com> wrote in message
news:upVwvwf5FHA.4076@tk2msftngp13.phx.gbl...
| Quote: | It is so weird having to go back so far to get this company into our wan.
--
Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
This posting is provided "AS IS" with no warranties, and confers no
rights.
"Ace Fekay [MVP]"
PleaseSubstituteMyActualFirstName&LastNameHere@hotmail.com> wrote in
message news:uojuBCY5FHA.1248@TK2MSFTNGP14.phx.gbl...
In news:OdMGkDT5FHA.432@TK2MSFTNGP09.phx.gbl,
Paul Bergson <pbergson@allete_nospam.com> made this post, which I then
commented about below:
Actually that is my goal. I was hoping to get this working first.
I'm not sure, and haven't tested it out, but I believe this may be a
chicken before the egg issue, if you know what I mean.
Ace
|
|
|
| Back to top |
|
|
Ace Fekay [MVP]
Guest
|
| Posted:
Fri Nov 11, 2005 1:50 am Post subject:
Re: 2003 Connection attempt to NT4 domain |
|
|
In news:%23XIHRxj5FHA.2036@TK2MSFTNGP14.phx.gbl,
Paul Bergson <pbergson@allete_nospam.com> made this post, which I then
commented about below:
| Quote: | My network guy fessed up to blocking ports 137 and 138. I got them
open and whah lah...
|
Don't you hate when that happens?
:-)
Cheers!
Ace |
|
| Back to top |
|
|
Paul Williams [MVP]
Guest
|
| Posted:
Fri Nov 11, 2005 5:50 pm Post subject:
Re: 2003 Connection attempt to NT4 domain |
|
|
It's always the same. The comms team ping something, get a reply and then
slope their shoulders!
Why do we need them?
--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net |
|
| Back to top |
|
|
Paul Bergson
Guest
|
| Posted:
Fri Nov 11, 2005 5:50 pm Post subject:
Re: 2003 Connection attempt to NT4 domain |
|
|
To make us miserable. We just had an org change, the boys from networking
are getting rolled up into our group. Sad thing is who do we get to point
the finger at now? : )
--
Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
This posting is provided "AS IS" with no warranties, and confers no rights.
"Paul Williams [MVP]" <ptw2001@hotmail.com> wrote in message
news:1131716932.229101@ernani.logica.co.uk...
|
|
| Back to top |
|
|
Ace Fekay [MVP]
Guest
|
| Posted:
Sat Nov 12, 2005 1:50 am Post subject:
Re: 2003 Connection attempt to NT4 domain |
|
|
In news:uzYWxgs5FHA.2888@tk2msftngp13.phx.gbl,
Paul Bergson <pbergson@allete_nospam.com> made this post, which I then
commented about below:
| Quote: | To make us miserable. We just had an org change, the boys from
networking are getting rolled up into our group. Sad thing is who do
we get to point the finger at now? : )
|
At each other!
:-)
At least they'll maybe now see what you guys actually do when things go
wrong.
Ace |
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in