Logon to DC from DOS

[KyoAD]

Hi,

I am trying to use a MS DOS Network client bootdisk to boot a client and then to logon to a Win2003 Domain controller server. I have created a test account say "JOHN" in the Win2003 DC active directory.

I then proceed the boot the client and then use NET LOGON to login. I have used the following format:

MYDOMAIN\JOHN (username)
password (password)

I have included a /DOMAIN:MYDOMAIN switch to ask to logon to the domain.

But it says that i have logged on but not validated by a server. Hence, whenever i tried to access a file share in that Win2k3 DC, it always prompt that the password is incorrect.

How should i do next?

 

[bofhrevenge2]

I think this will require that you turn off the signed traffic requirement as DOS clients don't support this 2003 requirement.

From MS help.

"Computers that have this policy set will not communicate with computers that do not have client-side packet signing enabled. Client-side packet signing can be enabled on computers running Windows 2000 and later"

It's in Default domain security policy - Local Policies - Security Options.

Give it a try you can always reenable it.

 

[bofhrevenge2]

Sorry this is more clear, if you right click the policy and select help it will explain in more detail.

Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options

 

[KyoAD]

Thanks.

I have already disabled that but it seems that the problem is still there. I am still unable to be validated by a server and hence unable to map to a shared resource. Do you have the MS link to this?

 

[bofhrevenge2]

The information that i gave came from Windows help when you right click that setting.

I know this isn't any help but i've had alot of trouble trying to connect to 2003 servers from DOS boot disks, i use one to connect to a Windows image on the server so i can build stations across the network, in the end i used a 2000 server as i couldn't get to 2003 to work correctly.

Sorry i can't be much more help.

 

[KyoAD]

Thanks,

No problems at all. Appreciate your help! Will try again and let you know if i managed to find anything!

 

[ntinlin]

Also check under Network Security: LAN Manager Authentication Level under security options as well.

By default I think W2003 only support NTLM2 and Kerberos. DOS uses Lan Manager authentication if I remember correctly.

Neill