How to prevent non-Windows 2000 clients to log on

[Rami]

After Nachi worm we implemented Microsoft SUS service to
automatically deploy security patches to our client
computers. Unfortunately SUS works only with Windows NT or
higher. I'd like to make sure no-one can log on to our
network with Windows 9x client. Is there a way in Active
directory to prevent access from certain type of clients?

 

[Diana Smith [MSFT]]

Hello Rami,

You can use the restrictanonymous key to perform this function. The
following tasks are restricted when the RestrictAnonymous registry value is
set to 2 on a Windows 2000-based domain controller:
- Down-level member workstations or servers (win9x and nt 4.0)are not able
to set up a netlogon secure channel.

246261 How to Use the RestrictAnonymous Registry Value in Windows 2000
http://support.microsoft.com/?id=246261

Thank You.

Diana.