Windows Server

fshguo · Guest

Hello, I just migrated the domain from Windows nt to Windows 2003
domain, there is only one Windows 2003 domain controller and one NT
BDC at the moment as the domain controllers. However I have run into a
problem: The Windows NT workstation could not change the password, it
either says "Unable to change the password on this accouont
C00000BBE", or the password doesn't meet the cretiria which it does.

I am wondering if the Windows 98/95 computer will have the same
problem.

What need to further configure to fix this problem?

Many thanks,
fshguo.

Frances [MSFT] · Guest

Hello,

I have some questions to confirm my understanding. Have you successfully
migrated the passports? Has the Windows NT workstation you mentioned stored
with SP3 or later service packs? According to my experience, this issue
could occur because of the down-level clients in win2k3 domain. I suggest
you use the steps below to isolate this issue:

Step 1. Check Network Connection
=============================
Please check if you can ping through from NT to win2k3 server.

Step 2. SMB Signing
================

2.1 On the Windows Server 2003 DC, click Start->Adminitrative Tools->Domain
Controller Security Policy.

2.2 Browse to:

Security Settings\Local Policies\Security Options

2.3 Disable the following settings:

Microsoft network server: Digitally sign communications (always)
Microsoft network client: Digitally sign communications (always)

2.4 Restart the Windows Server 2003 PDC.

Step 3: Change the win2k3 default security policy
====================================

Please change the win2k3 domain default security policy.
In the Default Domain Policy\Computer Configuration\Windows
Settings\Security Settings\Account Policies\Password Policy\Password must
meet complexity requirements, please set the policy to "disabled" or set it
as "not configured".

Step 4: Install DSclient on NT server
=============================
In order to avoid many potential issues, I suggest you download and install
DSclient on all down-level clients:

How to install the Active Directory client extension
http://support.microsoft.com/default.aspx?scid=kb;en-us;288358

A kind reminder, if you plan to continue use the BDC for a long time, I
suggest you add an NTemulator registry key on the current win2k3 DC to
avoid overloading issue. Please take a careful look at the articles below:

Windows 2000-Based Clients Connect Only to the Domain Controller That
http://support.microsoft.com/default.aspx?scid=kb;en-us;284937

How to Prevent Overloading on the First Domain Controller During Domain
http://support.microsoft.com/?id=298713

If the problem persists, please take a screen shot of the error message and
send to v-franhe@microsoft.com for research.

Best regards,

Frances He

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Frances [MSFT] · Guest

Hi Daniel,

I am glad to hear that the NT computer is able to login. As Windows 95
product has ended its life cycle, we do not support it any longer. For your
information, you may refer to the article below to check which products we
support.
http://support.microsoft.com/gp/lifewin

So I suggest you upgrade the Windows 95 OS to Windows 98. Furthermore, I
did not see the attachment you sent to me.

From my experience, I think the problem is due to the down-level clients in
win2k3 domain. Have you tried the step 2 I suggested? Please follow the
step below to Disable both of the following policies in the domain's
Default Domain Controllers Policy:

- Microsoft Network Server: Digitally sign communications (always)
- Domain Member: Digitally encrypt or sign secure channel data (always)
Once you've disabled the policy, please do a "gpupdate" on your Domain
Controller to update the policy immediately.

In addition, you mentioned you had installed the DSClient on your Windows
9x workstation. You may install the most recent one to achieve the goal.
Please check the version. The following article is for your information.
323455 Directory Services Client Update for Windows 98
http://support.microsoft.com/?id=323455

Hope it helps! If the problem persists, please contact me with the screen
shot.
Note: Please reply directly to the thread with any updates.

Best regards,

Frances He

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

windows nt workstation could not change the password in wind

	Windows Server Forum Index -> Migration	All times are GMT
Page 1 of 1