I have a windows 2003 server that is a domain controller where I store my other machines backups using powerquest drive image backup. Basically, on the machine I want to back up I boot from a floppy that installs tcip and connects to the shares I specify on windows 2003 server. When I can not get access to shares I do the following. From the floppy I run net and try to connect to a share, after entering the password it always comes back saying invalid password. Prior to upgrading to windows 2003 and I had windows 2000 server and never had a problem. I have a feeling it some type of security issue but not sure what.
Thaks in advance
Jack
This will be probably due to the increased security in Windows Server 2003, to fix it do the following
Open "Start Menu > Administrative Tools > Domain Controller Security Policy"
Navigate to "Local Policies > Security Options"
Search for the "Network Security: LAN Manager authentication level", change it to "Send LM & NTLM responses", then close the "Domain Controller Security Policy", open a command prompt window and type "gpupdate /force" or restart the domain controller.
Note however that this way you are reducing the security of the domain.
Native or Mixed mode doesn't restrict what clients you are using, you can still use NT4 SP6 or Windows98 clients in a Native Mode Domain
The domain mode (Native or Mixed) will affect the domain controllers you have, in Mixed mode you can have NT4, Win2000, Win2003 Domain controllers, but in Windows 2000 native, only Win2000 and Win2003 domain controllers are supported *however* you can use NT4 member servers and clients in that mode.
Secondary to the login will be file copy/transfer. This 'SMB' process will also require a change to security.
You will need to 'Disable' advanced SMB packet signing for the files transfers to complete successfully.
Two security reductions to accomplish a task of backup on a DOS machine. You might be better off looking at isolating the DOS backup and keeping the security high on the server.
You are right, i forgot to mention them.
These options are "Microsoft network server: Digitally sign communication (always)" and "Microsoft network client: Digitally sign communication (always)" make them both disabled, they are in the same place as the "LAN Manager Authentication Level"
Free Guide: Managing storage for virtual environments
Complete a brief survey to get a complimentary 70-page whitepaper featuring the best methods and solutions for your virtual environment, as well as hypervisor-specific management advice from TechTarget experts. Don’t miss out on this exclusive content!
Discuss This Question: 5  Replies