DOS (Win98) authentication to Windows 2003 Domain Controllers (for Ghosting/Unattended installs)

  • Thread starter Thread starter Shenan Stanley
  • Start date Start date
S

Shenan Stanley

I will probably post this in a couple of places over time, if it is decided
this is not the proper forum.

The title essentially gives my problem. I use a DOS (Win98) boot disk to
load network drivers and then map a network share on a server to ghost with.
Recently when we promoted a Windows 2003 server (all Windows 2000 before) to
DC status, I started having failures in authenticating in DOS (Win98). But
if you demote/remove the 2003 DC, you no longer have issues.

Is it not possible to authenticate in DOS (Win98) to a Windows 2003 DC? Has
anyone else seen this/found a solution?
 
Shenan said:
I will probably post this in a couple of places over time, if it is
decided this is not the proper forum.

The title essentially gives my problem. I use a DOS (Win98) boot
disk to load network drivers and then map a network share on a server
to ghost with. Recently when we promoted a Windows 2003 server (all
Windows 2000 before) to DC status, I started having failures in
authenticating in DOS (Win98). But if you demote/remove the 2003 DC,
you no longer have issues.

Is it not possible to authenticate in DOS (Win98) to a Windows 2003
DC? Has anyone else seen this/found a solution?
Click to expand...

Okay - I will answer my own question.

You need to turn off these policioes on the domain controllers:
"digitally sign secure channel data (ALWAYS)" and similar wording. You
should enable those that say "when possible".
 
Back
Top