Active Directory + MS DOS!!!

[Virtualp]

Hi,
We are in the process of upgrading from NT4 to 2003 AD.
We have a couple of legacy machines running MS DOS 6, is it possible to authentic these with the domain?

Thanks

 

[Jpoandl]

no.

Joseph L. Poandl
MCSE 2003

If your company is in need of experts to examine technical problems/solutions, please contact

http://www.NJCOMPUTERNETWORKS.com

(Sales@njcomputernetworks.com)

 

[Virtualp]

Thanks for the response however it is actually possible!
Just not very secure

 

[aftertaf]

ms net client...
on nt4 server cd



Aftertaf

"Resolve is never stronger than the night before it was never weaker

 

[Bhavin78]

I am also trying to do samething. Having Dos authenticate to 2003. Can you please guide me how it works? I tried with network client 2.0 (I used this for NT worked fine) not working with 2003.

 

[Bhavin78]

I tried this but no succes.
I have a dos pc on windows 2003 domain. I want DOS pc to be authenticated by 2003 domain. I tried everything but still no sucess. Any help will be appreciated.

My dos PC has NT Lan Manager version 2.0 ( it works fine with NT domain)
I made below changes to my domain group policy
Digitally sign client communications (always) - disabled
Digitally sign server communications (always)- disabled
LAN Manager Authentication Level set to Send LM and NTLM - use NTLMv2
session security if negotiated - (default) send LM & NTLM responses
Secure channel: Digitally encrypt or sign secure channel data (always) -disabled
Secure channel: Require strong (Windows 2000 or later) session key -disabled

How can my dos pc authenticate to windows 2003 domain and have access to files and folder.

 

[aftertaf]

if you allow ntlm it should work...
maybe its version 1?
and doe the PC have an account in AD?

Aftertaf

"Resolve is never stronger than the night before it was never weaker

 

[Bhavin78]

My dos PC has NT Lan Manager version 2.0 ( it works fine with NT domain)
I made below changes to my domain group policy
Digitally sign client communications (always) - disabled
Digitally sign server communications (always)- disabled
LAN Manager Authentication Level set to Send LM and NTLM - use NTLMv2
session security if negotiated - (default) send LM & NTLM responses
Secure channel: Digitally encrypt or sign secure channel data (always) -disabled
Secure channel: Require strong (Windows 2000 or later) session key -disabled
I created account in AD
Am i missing anything else...If it's possible for dos to authenticate to 2003 than I need help.

 

[ecunupe]

Please check the following registry keys also. HKLM\System\CCS\Control\LSA
Restrictanonymous 0
Restrictanonymoussam 0
lmcompatabilitylevel 0
everyoneincludeanonymous 0 (I Think on this one we may need to add everyone to the pre-windows 2000 compatible access group or vice versa.)
Check the nolmhash value here to. If i can remember it may need to be set to 0.
Make sure under HKLM\System\CCS\Services\ Lanmanserver and lanmanworkstation we have requiresecuritysignature set to 0.
The reason we use these settings is to allow us to have Windows 2000 security compat. Thus we are actually weakening our security on our servers to give access to downlevel clients. Also, any changes made to the LSA reg keys requires a reboot.