Active Directory Domain User Account With a Windows NT 4.0 Computer Account

[Guest]

I have two domains, one NT4 and one AD mixed mode. They
are connected by two way trusts. Everything works great
except when a user with an account in the AD domain logs
into a computer that is in the NT4 domain. This process
eventually completes but is extremely slow. Once the
logon is complete access to resources in either domain
performs as expected. Both PCs are located on the same
network switch and subnet. All domain and computer
entries accurately appear in the NETBIOS name server. Any
idea why this takes so long?

 

[David Brandt [MSFT]]

I'm nost sure how slow "extremely slow" is but will still come down to the
NT4 having to verify a valid account in the 2k domain. When you say name
server, I'm assuming wins, but is there a wins server in each domain doing
push/pull or only one wins server in one domain doing service for both. Not
sure how many dc's there are in the 2k domain, but you might try adding an
lmhosts file on the NT4 pdc pointing to at least the pdc emulator in 2k (and
if only a few dc's there adding the line for them too;
IP DCNAME #PRE #DOMOMAIN-NAME

for the 2k pdc;
IP PDCNAME #PRE #DOMOMAIN-NAME
IP "DOMAIN-NAME \0x1b" #PRE

If you don't use lmhosts much, look at the following, and be sure that you
see the correct entries from the nbtstat output it shows;
180094 How to Write an LMHOSTS File for Domain Validation and Other Name
http://support.microsoft.com/?id=180094

With that info in cache, it should speed things up a bit.

--
David Brandt
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.