Win 98 password change/new users logon problems

[RiverPlate]

Hey, everyone !
I have a windows 2000 AD network (SP4), with 50 users on it. Most Pcs are Win98SE.
Since 2 weeks ago when I create a new user account or when one old user's password change (because of limit days expiration set) the win98 Pcs can't log in to the network again with the message:

" the domain password you supplied is not correct, or access to your logon server has been denied "

But if the Pc is running Win2k or XP all works properly and users have no login problems.
It seems to be a new password problem with new or old users change. I reboot the server with no success.
Many thanks for any suggestions you may have !
RP

 

[kmcferrin]

Windows 98 was not deigned to work as part of a domain, that's the first problem.

When you log into a Win98 system using your username/pw/domain you are not logging into the domain, you are logging into the local PC using an arbitrary set of credentials that happens to correspond to that of the domain. When you try to access domain resources Win98 passes these cached credentials to the server for authentication, which works just fine.

If you change the user's domain PW they will be able to use their new PW to log into the domain, but not from a Win98 PC that they have used in the past. The reason is that the Win98 PC isn't checking the username/PW against the username/PW on the domain, it's checking it against the old username/PW that it has stored on the PC. To fix this, any time the user's PW changes you will need to go into the Password applet from the Win98 Control Panel and change the password from the old PW to the new PW. Once they match you won't have any problem logging in, at least not until the next time the PW changes.

 

[karlisi]

kmcferrin you are not right. Local passwords and domain passwords are different things and you dont need to set these passwords identical.
RiverPlate, check Event Viewer Security log on your DC, perhaps there are some problems with too restrictive access policies, for example Win98 require annonymous acces enabled on Win2000 DC to change passwords. Some Windows patches can tighten security settings, perhaps you installed 2 weeks ago some of them.
Read also these:

http://support.microsoft.com/default.aspx?scid=kb;en-us;308178

http://support.microsoft.com/default.aspx?scid=kb;en-us;272594

And if you use IPX on your network:

http://support.microsoft.com/default.aspx?scid=kb;en-us;260399

===
Karlis
ECDL; MCP

 

[RiverPlate]

Karlisi, thanks, I read kmcferrin reply and you're right.
The surprise is that the Win2k server worked properly since the last year with most win98SO, and I did not install any patches.
I'll look after the access policies, and see MS support pages.
Thanks for your replies.
RP

 

[daniedu]

Hi! RiverPlate
I have the same problem. If you can work it out ... please tell me how!!

Grettins from el jefe Astrada.

 

[MattWray]

Have you installed the DSCLIENT from the win2k server CD? Password changes are a common problem when trying to use 98 in a Domain.

And it cannot be a policy issue as policies are not applied to downlevel clients.

Thanks,

Matt Wray

GFH

http://www.sss-steel.com