After W2k SP4 installation Active Directory not accessible

[Scott]

I recently installed W2k SP4 and now cannot view any of
the Active Directory options. I get a message saying "The
specified domain does not exist or could not be
contacted". When I try to connect to our single domain I
get the message "Cannot connect to the pre-Windows 2000
domain: 'domain name'" It's possible that the domain was
originally created under NT4 and was restored to Windows
2000 after we upgraded.

Any ideas on how to fix this problem?

TIA

 

[Tim Hines [MSFT]]

The error ""The specified domain does not exist or could not be contacted".
usually indicates that there is a name resolution problem. You should check
your DNS configuration on the DC and check the DNS zone and its contents to
make sure that the SRV records are there.

You should also run a diagnostic utility from Microsoft called mpsreport.
Download the directory services version from
http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd915706/MPSRPT_DirSvc.EXE
The readme is at
http://download.microsoft.com/downl...e5-a579-30b0bd915706/MPSRPT_DirSvc_Readme.txt

Be sure to review the output of the dcdiag report and the netdiag report.
You can post the errors here for additional recommendations.


--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Cary Shultz [A.D. MVP]]

Tim,

This could be caused by a single-label domain......

Cary

 

[Guest]

I don't know my way round servers and networks at all except to set up a new user so I think I may be in too deep here. We use an external IT support person but are in the process of getting someone new at the moment.

Selected output of the two diagnostic reports you suggested I look at are shown below. If you can tell anything from this and have the time and the patience to give me basic instructions on how to proceed I'd appreciate the help. If the situation is too complicated then I better leave it to someone more qualified. We hope to have a new IT support person soon. The network seems to be functioning OK except for our backup failing when trying to backup system settings. The backup log file is what alerted me to the fact there was something wrong with the Active Directory. I've stopped trying to backup system settings in the meantime.

Our server is called "server" and I've made our domain name anonymous as "co_name.co.uk".

The line below from the DCDIAG output looks strange to my inexperienced eye in the that it breaks the Domain Controller name down into separate parts ie. "DC=co_name,DC=co,DC=uk". Is this normal?

"siteCN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=co_name,DC=co,DC=uk, error code 7, and internal id f08028f."

Thanks for your previous help and anything else you can suggest.


DCDIAG Output
-------------

Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine server, is a DC.
* Connecting to directory service on server server.
* Collecting site info.
* Identifying all servers.
* Found 1 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests
....
Starting test: Advertising
Fatal ErrorsGetDcName (SERVER) call failed, error 1355
The Locator could not find the server.
......................... SERVER failed test Advertising
....
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
NtFrs Service is stopped on [SERVER]
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
* Checking Service: NtFrs
......................... SERVER failed test Services
....
Starting test: kccevent
* The KCC Event log test
An Error Event occured. EventID: 0xC000046A
Time Generated: 06/24/2004 10:29:35
Event String: The automatic topology generator was unable tocomplete the topology for siteCN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=co_name,DC=co,DC=uk, error code 7, and internal id f08028f.
......................... SERVER failed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x000003F6
Time Generated: 06/24/2004 10:40:44
Event String: The JET Database call returned the followingerror : -510. Additional Debug Information:JetBackupToNULL.
An Error Event occured. EventID: 0x000003F8
Time Generated: 06/24/2004 10:40:44
Event String: The DHCP service encountered the following errorwhen backing up the database: An error occurred while accessing the DHCP database. Look at theDHCP server event log for more information on this error.
......................... SERVER failed test systemlog
....
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error 1355
A Global Catalog Server could not be located - All GC's are down.
Warning: DcGetDcName(PDC_REQUIRED) call failed, error 1355
A Primary Domain Controller could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Preferred Time Server Name: \\server.co_name.co.uk
Locator Flags: 0xe00001e5
Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
A KDC could not be located - All the KDCs are down.
......................... co_name.co.uk failed test FsmoCheck


netdiag output
--------------

Opening \Device\NwlnkIpx failed
....
Testing the WINS server
Local Area Connection
There is no primary WINS server defined for this adapter.
There is no secondary WINS server defined for this adapter.
Gathering Winsock information.
Testing DNS
The DNS registration for server.co_name.co.uk is correct on all DNS servers
PASS - All the DNS entries for DC are registered on DNS server '192.168.4.20'.
....
Computer Name: SERVER
DNS Host Name: server.co_name.co.uk
DNS Domain Name: co_name.co.uk
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 6 Model 11 Stepping 1, GenuineIntel
....
No remote names have been found.

WINS service test. . . . . : Skipped
There is no primary WINS server defined for this adapter.
There is no secondary WINS server defined for this adapter.
There are no WINS servers configured for this interface.
IPX test : IPX is not installed on this machine.
....
Domain membership test . . . . . . : Passed
Machine is a . . . . . . . . . : Primary Domain Controller Emulator
Netbios Domain name. . . . . . : CO_NAME
Dns domain name. . . . . . . . : co_name.co.uk
Dns forest name. . . . . . . . : co_name.co.uk
Domain Guid. . . . . . . . . . : {905333E4-6288-4CF7-9EB9-A52DF708E7B5}
Domain Sid . . . . . . . . . . : S-1-5-21-1960408961-920026266-854245398
Logon User . . . . . . . . . . : administrator
Logon Domain . . . . . . . . . : CO_NAME
....
Autonet address test . . . . . . . : Passed
PASS - you have at least one non-autoconfigured IP address
....
DC discovery test. . . . . . . . . : Passed

Find DC in domain 'CO_NAME':
Found this DC in domain 'CO_NAME':
DC. . . . . . . . . . . : \\server.co_name.co.uk
Address . . . . . . . . : \\192.168.4.20
Domain Guid . . . . . . : {905333E4-6288-4CF7-9EB9-A52DF708E7B5}
Domain Name . . . . . . : co_name.co.uk
Forest Name . . . . . . : co_name.co.uk
DC Site Name. . . . . . : Default-First-Site-Name
Our Site Name . . . . . : Default-First-Site-Name
Flags . . . . . . . . . : PDC GC KDC TIMESERV WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE

Find PDC emulator in domain 'CO_NAME':
Found this PDC emulator in domain 'CO_NAME':
DC. . . . . . . . . . . : \\server.co_name.co.uk
Address . . . . . . . . : \\192.168.4.20
Domain Guid . . . . . . : {905333E4-6288-4CF7-9EB9-A52DF708E7B5}
Domain Name . . . . . . : co_name.co.uk
Forest Name . . . . . . : co_name.co.uk
DC Site Name. . . . . . : Default-First-Site-Name
Our Site Name . . . . . : Default-First-Site-Name
Flags . . . . . . . . . : PDC GC KDC TIMESERV WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE

Find Windows 2000 DC in domain 'CO_NAME':
[WARNING] Cannot find Windows 2000 DC in domain 'CO_NAME'. [ERROR_NO_SUCH_DOMAIN]

This isn't a problem if domain 'CO_NAME' does not have any Windows 2000 DCs.
....
Trust relationship test. . . . . . : Skipped
....
LDAP test. . . . . . . . . . . . . : Passed
DC '\\server.co_name.co.uk' isn't running the DS. Cannot test LDAP.
....
Do Negotiate authenticated LDAP call to 'server.co_name.co.uk'.
Found 1 entries:
....
[WARNING] Failed to query SPN registration on DC 'server.co_name.co.uk'.
....
IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.

There are 0 filters


The command completed successfully

 

[Tim Hines [MSFT]]

Have there been any other DCs in this domain or has this always been the
only one? I didn't see the part of the dcdiag that lists the names of the
fsmo role owners. You can determine the role owner names by typing "netdom
query fsmo". Make sure that the names listed match the name of the current
DC.
I noticed that NTFRS is not running. Has it been disabled, make sure the
startup type is automatic and start it.


--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

I don't know my way round servers and networks at all except to set up a

new user so I think I may be in too deep here. We use an external IT support
person but are in the process of getting someone new at the moment.

Selected output of the two diagnostic reports you suggested I look at are

shown below. If you can tell anything from this and have the time and the
patience to give me basic instructions on how to proceed I'd appreciate the
help. If the situation is too complicated then I better leave it to someone
more qualified. We hope to have a new IT support person soon. The network
seems to be functioning OK except for our backup failing when trying to
backup system settings. The backup log file is what alerted me to the fact
there was something wrong with the Active Directory. I've stopped trying to
backup system settings in the meantime.

Our server is called "server" and I've made our domain name anonymous as "co_name.co.uk".

The line below from the DCDIAG output looks strange to my inexperienced

eye in the that it breaks the Domain Controller name down into separate
parts ie. "DC=co_name,DC=co,DC=uk". Is this normal?"siteCN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=co_name,DC=co,D
C=uk, error code 7, and internal id f08028f."

Thanks for your previous help and anything else you can suggest.


DCDIAG Output
-------------

Domain Controller Diagnosis

Performing initial setup:
* Verifying that the local machine server, is a DC.
* Connecting to directory service on server server.
* Collecting site info.
* Identifying all servers.
* Found 1 DC(s). Testing 1 of them.
Done gathering initial info.

Doing initial required tests
...
Starting test: Advertising
Fatal ErrorsGetDcName (SERVER) call failed, error 1355
The Locator could not find the server.
......................... SERVER failed test Advertising
...
Starting test: Services
* Checking Service: Dnscache
* Checking Service: NtFrs
NtFrs Service is stopped on [SERVER]
* Checking Service: IsmServ
* Checking Service: kdc
* Checking Service: SamSs
* Checking Service: LanmanServer
* Checking Service: LanmanWorkstation
* Checking Service: RpcSs
* Checking Service: RPCLOCATOR
* Checking Service: w32time
* Checking Service: TrkWks
* Checking Service: TrkSvr
* Checking Service: NETLOGON
* Checking Service: Dnscache
* Checking Service: NtFrs
......................... SERVER failed test Services
...
Starting test: kccevent
* The KCC Event log test
An Error Event occured. EventID: 0xC000046A
Time Generated: 06/24/2004 10:29:35
Event String: The automatic topology generator was unable

tocomplete the topology for
siteCN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=co_name,DC=co,DC
=uk, error code 7, and internal id f08028f.

......................... SERVER failed test kccevent
Starting test: systemlog
* The System Event log test
An Error Event occured. EventID: 0x000003F6
Time Generated: 06/24/2004 10:40:44
Event String: The JET Database call returned the

followingerror : -510. Additional Debug Information:JetBackupToNULL.

An Error Event occured. EventID: 0x000003F8
Time Generated: 06/24/2004 10:40:44
Event String: The DHCP service encountered the following

errorwhen backing up the database: An error occurred while accessing the
DHCP database. Look at theDHCP server event log for more information on this
error.

......................... SERVER failed test systemlog
...
Starting test: FsmoCheck
Warning: DcGetDcName(GC_SERVER_REQUIRED) call failed, error 1355
A Global Catalog Server could not be located - All GC's are down.
Warning: DcGetDcName(PDC_REQUIRED) call failed, error 1355
A Primary Domain Controller could not be located.
The server holding the PDC role is down.
Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
A Time Server could not be located.
The server holding the PDC role is down.
Preferred Time Server Name: \\server.co_name.co.uk
Locator Flags: 0xe00001e5
Warning: DcGetDcName(KDC_REQUIRED) call failed, error 1355
A KDC could not be located - All the KDCs are down.
......................... co_name.co.uk failed test FsmoCheck


netdiag output
--------------

Opening \Device\NwlnkIpx failed
...
Testing the WINS server
Local Area Connection
There is no primary WINS server defined for this adapter.
There is no secondary WINS server defined for this adapter.
Gathering Winsock information.
Testing DNS
The DNS registration for server.co_name.co.uk is correct on all DNS servers
PASS - All the DNS entries for DC are registered on DNS server '192.168.4.20'.
...
Computer Name: SERVER
DNS Host Name: server.co_name.co.uk
DNS Domain Name: co_name.co.uk
System info : Windows 2000 Server (Build 2195)
Processor : x86 Family 6 Model 11 Stepping 1, GenuineIntel
...
No remote names have been found.

WINS service test. . . . . : Skipped
There is no primary WINS server defined for this adapter.
There is no secondary WINS server defined for this adapter.
There are no WINS servers configured for this interface.
IPX test : IPX is not installed on this machine.
...
Domain membership test . . . . . . : Passed
Machine is a . . . . . . . . . : Primary Domain Controller Emulator
Netbios Domain name. . . . . . : CO_NAME
Dns domain name. . . . . . . . : co_name.co.uk
Dns forest name. . . . . . . . : co_name.co.uk
Domain Guid. . . . . . . . . . : {905333E4-6288-4CF7-9EB9-A52DF708E7B5}
Domain Sid . . . . . . . . . . : S-1-5-21-1960408961-920026266-854245398
Logon User . . . . . . . . . . : administrator
Logon Domain . . . . . . . . . : CO_NAME
...
Autonet address test . . . . . . . : Passed
PASS - you have at least one non-autoconfigured IP address
...
DC discovery test. . . . . . . . . : Passed

Find DC in domain 'CO_NAME':
Found this DC in domain 'CO_NAME':
DC. . . . . . . . . . . : \\server.co_name.co.uk
Address . . . . . . . . : \\192.168.4.20
Domain Guid . . . . . . : {905333E4-6288-4CF7-9EB9-A52DF708E7B5}
Domain Name . . . . . . : co_name.co.uk
Forest Name . . . . . . : co_name.co.uk
DC Site Name. . . . . . : Default-First-Site-Name
Our Site Name . . . . . : Default-First-Site-Name
Flags . . . . . . . . . : PDC GC KDC TIMESERV WRITABLE DNS_DC

DNS_DOMAIN DNS_FOREST CLOSE_SITE

Find PDC emulator in domain 'CO_NAME':
Found this PDC emulator in domain 'CO_NAME':
DC. . . . . . . . . . . : \\server.co_name.co.uk
Address . . . . . . . . : \\192.168.4.20
Domain Guid . . . . . . : {905333E4-6288-4CF7-9EB9-A52DF708E7B5}
Domain Name . . . . . . : co_name.co.uk
Forest Name . . . . . . : co_name.co.uk
DC Site Name. . . . . . : Default-First-Site-Name
Our Site Name . . . . . : Default-First-Site-Name
Flags . . . . . . . . . : PDC GC KDC TIMESERV WRITABLE DNS_DC

DNS_DOMAIN DNS_FOREST CLOSE_SITE

Find Windows 2000 DC in domain 'CO_NAME':
[WARNING] Cannot find Windows 2000 DC in domain 'CO_NAME'. [ERROR_NO_SUCH_DOMAIN]

This isn't a problem if domain 'CO_NAME' does not have any Windows 2000 DCs.
...
Trust relationship test. . . . . . : Skipped
...
LDAP test. . . . . . . . . . . . . : Passed
DC '\\server.co_name.co.uk' isn't running the DS. Cannot test LDAP.
...
Do Negotiate authenticated LDAP call to 'server.co_name.co.uk'.
Found 1 entries:
...
[WARNING] Failed to query SPN registration on DC 'server.co_name.co.uk'.
...
IP Security test . . . . . . . . . : Passed
IPSec policy service is active, but no policy is assigned.

There are 0 filters


The command completed successfully

 

[Scott]

As far as I know there haven't been any other DCs in the
domain.

I started NTFRS. It was stopped but "startup" was set to
automatic already. I will check that it has started when I
next reboot. We only have one server though. Does this
service play a role for a single server?

I typed "netdom query fsmo" at the
WINNT\MPSReports\DirSvc\Bin> prompt and got the
message "The specified domain either does not exist or
could not be contacted".

Is this is why I can't see any reference to fsmo role
owners or holders in the full dcdiag report? The only
references to role holders in the report are shown below:

Starting test: KnowsOfRoleHolders
Role Schema Owner = CN=NTDS
Settings,CN=SERVER,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=killalea,DC=co,DC=nz
Role Domain Owner = CN=NTDS
Settings,CN=SERVER,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=killalea,DC=co,DC=nz
Role PDC Owner = CN=NTDS
Settings,CN=SERVER,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=killalea,DC=co,DC=nz
Role Rid Owner = CN=NTDS
Settings,CN=SERVER,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=killalea,DC=co,DC=nz
Role Infrastructure Update Owner = CN=NTDS
Settings,CN=SERVER,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=killalea,DC=co,DC=nz
......................... SERVER passed test
KnowsOfRoleHolders


When I installed the Service Pack I chose the option to
archive old files so that I could uninstall the SP if
required but in the netdiag report I see the following:

Hotfixes :
Installed? Name
....
No ServicePackUninstall


Service Pack 4 is listed under Add/Remove Programs though.

Is uninstalling the service pack an option or would it be
best to try and resolve this problem so that the system
retains all the SP4 fixes?

 

[Tim Hines [MSFT]]

I don't think that Sp4 is the problem and removing it would not resolve the
issue. At a command prompt type net share to verify that you have sysvol
and netlogon shares. If these are not present the DC will not be recognized
as one. Make sure that RPC and the RPC locator services are set to
automatic. Are there any errors in the system evt log?


--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Scott]

The "Net Share" command produced the following lines

NETLOGON C:\WINNT\SYSVOL\sysvol\co_name.co.uk\SCRIPTS
Logon server
share
SYSVOL C:\WINNT\SYSVOL\sysvol Logon server
share

The RPC and RPC Locator services are started and set to
automatic.

The following errors have been logged:

System Log
----------
DhcpServer Error None 1014 N/A SERVER
The JET Database call returned the following
error : -510.

DhcpServer Error None 1016 N/A SERVER
The DHCP service encountered the following error
when backing up the database:
An error occurred while accessing the DHCP database. Look
at the
DHCP server event log for more information on this error.

Directory Service
-----------------
Error Source: NTDS KCC Event: 1130

File Replication Server
-----------------------
Error Source:NTFRS Event:13568
(this happened at the time I turned FRS on yesterday)

DNS Server
----------
Error Source: DNS Error: 4015


Microsoft DHCP Service Activity Log
-----------------------------------

50+ Codes above 50 are used for Rogue Server
Detection information.

ID Date,Time,Description,IP Address,Host Name,MAC Address
60,06/25/04,00:48:55,No DC is DS Enabled,,co_name.co.uk,
60,06/25/04,01:49:42,No DC is DS Enabled,,co_name.co.uk,
60,06/25/04,02:50:29,No DC is DS Enabled,,co_name.co.uk,
60,06/25/04,03:51:17,No DC is DS Enabled,,co_name.co.uk,
60,06/25/04,04:52:04,No DC is DS Enabled,,co_name.co.uk,
60,06/25/04,05:52:51,No DC is DS Enabled,,co_name.co.uk,
60,06/25/04,06:53:38,No DC is DS Enabled,,co_name.co.uk,
60,06/25/04,07:54:25,No DC is DS Enabled,,co_name.co.uk,
60,06/25/04,08:55:12,No DC is DS Enabled,,co_name.co.uk,
60,06/25/04,09:56:00,No DC is DS Enabled,,co_name.co.uk,
60,06/25/04,10:56:49,No DC is DS Enabled,,co_name.co.uk,
60,06/25/04,11:57:37,No DC is DS Enabled,,co_name.co.uk,
60,06/25/04,12:58:24,No DC is DS Enabled,,co_name.co.uk,
60,06/25/04,13:59:11,No DC is DS Enabled,,co_name.co.uk,
60,06/25/04,14:59:58,No DC is DS Enabled,,co_name.co.uk,
60,06/25/04,16:00:46,No DC is DS Enabled,,co_name.co.uk,
60,06/25/04,17:01:33,No DC is DS Enabled,,co_name.co.uk,
60,06/25/04,18:02:20,No DC is DS Enabled,,co_name.co.uk,

Hope this is informative!

 

[Scott]

Have now lost connection to the server from our 3 XP
workstations. Logon is slow but there is no warning
message that the server connection wasn't made.

When trying to access the USERS drive on the server though
I get the following error:

"An error occurred while reconnecting U: to \\SERVER\USERS
Microsoft Windows Network: the local device name is
already in use.
This connection has not been restored"

Trying one Win98 workstation, immediately on logging in I
get the message:

"No domain server was available to validate your password.
You may not be able to gain access to some network
resources"

....but I can do everything I can think of with the
network - open files off the server, look at email, print
to a network printer and use the internet.

Lucky 6 of our 9 workstations are Win98 although I haven't
tested them all yet!

 

[Tim Hines [MSFT]]

Do you know if eithor one of these registry entries have been added on the
DC?



HKEY_LOCAL_MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/NT4
Emulator

or


HKEY_LOCAL_MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/Neu
tralizeNT4Emulator

If these are present you can change the value to 0 or delete it. Check for
the second value on the XP clients also.


--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Scott]

Neither of the registry settings you mentioned have been
added to the Domain Controller and the second one hasn't
been added to any of the XP machines.

I got the help of an external IT support person today who
I had asked to have a look at this thread. He has managed
to get the 3 XP machines working and prevent the error
message on logon to the Win98 PCs. I hope I have this
correct but after seeing that we were getting error
messages in the system log for the DCHP Server he had me
key in the IP Address, Subnet Mask and Gateway IP Address
in the TCP/IP settings for each computer as they were
previously obtaining these automatically (or rather the XP
machines were failing to).

The plan now is to leave things alone until the weekend as
the network is working OK. On Friday night I'll try
rebooting the server to see if this fixes anything or
causes any other problems. If the Active Directory and
user settings are still inaccessible our new IT support
guy will, as I understand it, change the server to operate
at a workgroup level rather than having a Domain
Controller and using Active Directory. He thinks we don't
really need the complexity we currently have given that we
only have 9 workstations and a single server. He did look
at the following link and wondered whether it might be a
way of resolving the problem with Active Directory but
left it to me to follow it up with you or research it
myself.

http://www.jsiinc.com/SUBE/tip2200/rh2298.htm

Does this link seem like an answer to you or do you have
any advice before we take the Workgroup option?

Thanks for your help.

-----Original Message-----
Do you know if eithor one of these registry entries have been added on the
DC?



HKEY_LOCAL_MACHINE/System/CurrentControlSet/Services/Netlo gon/Parameters/NT4
gon/Parameters/Neu
tralizeNT4Emulator

If these are present you can change the value to 0 or delete it. Check for
the second value on the XP clients also.


--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and

confers no rights.