IPC$ refusing establish secure channel

[Wilf]

I have been trouble shooting strange logon problems in NT4.0 resource
domains, I have a Master domain running WK2, fully patched. However in a
network trace I notice that the resource domain dontrollers when
establishing a connectiion to one of the domain controllers


0.001.056 30/09/2003 16:35:08 CIFS/SMB: C Tree Connect AndX
Path=\\LUXSDC02\IPC$, Service=IPC


0.000.337 30/09/2003 16:35:08 CIFS/SMB: R Setup Account AndX (to
frame 1361) Status= Error: STATUS_ACCESS_DENIED


Since this connection failed the trusting DC contacts another trused domain
controller and the IPC$ connection passes fine.
No problem but the other trusted domain controller in in another site,
meaning that all my logon traffic goes accross the inter-site link.

I should add that when doing a net use \\luxsdc02\ipc$ from the same machine
this passes fine.

Has any one any ideas of how to sove this problem ?

Wilf

 

[Steven Umbach]

Hi Wilf. I don't know exact problem, but see this link about the security option
for "additional restrictions for anonymous connections" with the number 2/no
access without explicit anonymous permisions setting and ramifications of that
may be of interest. -- Steve

http://support.microsoft.com/?kbid=246261