Windows 98 clients randomly locked out of DC.

pts.
Tags:
Management
Microsoft Windows
OS
Security
Servers
SQL Server
Hey all, I have a mix of WinXP/2000/98SE clients on a Win2K3 domain. I recently upgraded from Win2K domain to Win2K3. Prior to upgrade, there were no Win98 client issues. Every day or so, the user account logged in on a 98 box gets locked out on the DC. This is after logging in just fine in the morning, working half the day, and then all of a sudden not being able to use network resources. Also, this is not limited to a specific user account or Win98 machine. It seems to happen any random day to any random user logged into any random Win98 box. If I check the security logs it records a logon failure about 3 times per second for that account. I know, I know, I know that the obvious solution is to get rid of the 98 boxes...but I need to come up with a more prompt solution for the short term. Any ideas? Mike

Answer Wiki

Thanks. We'll let you know when a new response is added.

Check with the network resources which these 98 client uses. and i also hope that you AD is running in native mode. Since win2k network is more secured. the server might ask for authentication for every resouce the client will use. Since Kerbros authentication is enabled. And 98 Clients are unable to provide that credentials. I think you may have to install DSCLIENT on all the 98 machines. That is your last solution. if that fails then you will have get rid of those 98 clients.

Discuss This Question: 2  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • AdminMike
    I have also installed DSCLIENT to all the Win98 boxes. It didn't appear to make any difference.
    0 pointsBadges:
    report
  • Joco1141
    you could alternatively set up a fake vpn that will accept incoming connections on a separate network adapter and put all your 98 machines on that network segment and use pptp and just set up a connection to the server through that interface. tey will authenicate and be connected to the server although in a different way but they will still have access to the server resources without having to throw the machines away or purchasing upgrades and liccenses.. give it a try it will take you setting up a conneciona nd identifying each computer in the switch and routing them through another switch but its cheaper than new boxes
    0 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following