C
Craig Blake
We currently have a heterogenious environment of 98 and WinXP clients.
We have two domains. A AD domain and a NT 4 domain. The NT 4 domain
has a trust relationship set up with the AD domain. The WinXP client
that is experiencing the trouble is logging into the AD domain. We are
trying to make the XP machine open a unc path to a Win2kserver that is
on the NT 4 domain. This server has 2 IP addresses bound to the card.
When we type in "\\ip-address" the server opens up fine and and allows
us to see the shares. when we type in "\\name" it prompts us with the
message "the user name you typed is the same as the user name you
logged in with. That user name has already been tried. A domain
controller cannot be found to verify that user name." As well the XP
Client's event viewer under System lists:
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 3/1/2004
Time: 1:47:40 PM
User: N/A
Computer: DESCT1399
Description:
The Security System detected an attempted downgrade attack for server
cifs/servername.domainname. The failure code from authentication
protocol Kerberos was "The referenced account is currently disabled
and may not be logged on to.
(0xc0000072)".
As well as the event:
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40961
Date: 3/1/2004
Time: 1:47:40 PM
User: N/A
Computer: DESCT1399
Description:
The Security System could not establish a secured connection with the
server cifs/servername.domainname. No authentication protocol was
available.
I have tried to enable netbios over TCP/IP but that did not work.
I am confused why passthrough will work correctly in Win2k clients but
not on XP. Yet it seems to know who I am it just won't let me in by
specifying name but it will if I just type the address.
Any idea's?
Thanks, Craig Blake
We have two domains. A AD domain and a NT 4 domain. The NT 4 domain
has a trust relationship set up with the AD domain. The WinXP client
that is experiencing the trouble is logging into the AD domain. We are
trying to make the XP machine open a unc path to a Win2kserver that is
on the NT 4 domain. This server has 2 IP addresses bound to the card.
When we type in "\\ip-address" the server opens up fine and and allows
us to see the shares. when we type in "\\name" it prompts us with the
message "the user name you typed is the same as the user name you
logged in with. That user name has already been tried. A domain
controller cannot be found to verify that user name." As well the XP
Client's event viewer under System lists:
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40960
Date: 3/1/2004
Time: 1:47:40 PM
User: N/A
Computer: DESCT1399
Description:
The Security System detected an attempted downgrade attack for server
cifs/servername.domainname. The failure code from authentication
protocol Kerberos was "The referenced account is currently disabled
and may not be logged on to.
(0xc0000072)".
As well as the event:
Event Type: Warning
Event Source: LSASRV
Event Category: SPNEGO (Negotiator)
Event ID: 40961
Date: 3/1/2004
Time: 1:47:40 PM
User: N/A
Computer: DESCT1399
Description:
The Security System could not establish a secured connection with the
server cifs/servername.domainname. No authentication protocol was
available.
I have tried to enable netbios over TCP/IP but that did not work.
I am confused why passthrough will work correctly in Win2k clients but
not on XP. Yet it seems to know who I am it just won't let me in by
specifying name but it will if I just type the address.
Any idea's?
Thanks, Craig Blake