win2k server not allowing new users in on win98 clients

[mikeindo]

new users logging into our win2k domain on win98 clients get "domain pwd wrong or access to server denied." but they can successfully log in on winXP clients and old users can still successfully use the win98 machines. i've tried recreating the new users' accounts and even copying from old accounts and renaming - nothing. of course, tried rebooting win98 machines - also nothing. whats up with that? thanks.

 

[danomac]

Try this:

http://support.microsoft.com/default.aspx?scid=kb;en-us;q177362

or this:

http://support.microsoft.com/default.aspx?scid=kb;en-us;q178361

For some reason a couple of our 98 machines had spaces at the end of the computer name. Not sure why they were there.

 

[sleew]

Is it happening from the begining or it worked fine before. Is there some WINS error 4205, 4208? Is there wins. Try renaming w98 and rejoining them to domain. Srdjan Katic
Microsoft Department Manager
Compaq & Microsoft TS
sleew@infosky.net

 

[mikeindo]

danomac, thanks for the suggestion. there was no space at the end of the computer's name but i entered the name in again and restarted. unfortunately, no change.

sleew, the thing is it still works fine! sort of. old users can still successfully log on using these machines. and i know the new users' accounts are good because they can log in on winXP clients. and we do not use wins. as i wrote above, also tried renaming but no change...

 

[LonC25]

I have something similiar, but I can't get any user to log onto the Windows 98 machines. They get a "domain pwd wrong or access to server denied."

All users can log on using Windows 2000 machines though.

Please help

 

[danomac]

I found this bookmark in my list as well when I was having problems. This may be your problem, as it may be trying to use an expired session key on the server. Apparently Win98 tracks these keys and had a problem with it.

http://support.microsoft.com/default.aspx?scid=kb;en-us;272594

Hopefully this will help.

Daniel.

 

[mikeindo]

danomac, again, thanks but that also didnt do the trick. i did what the article said and then noticed the part about "a hotfix is available so contact microsoft support services for options and pricing". of course, i'm not going to pay for a hotfix, so maybe i'll just do a hotfix scan and cross my fingers...

 

[LonC25]

I called and got the hotfix for free, but it didn't work.

I have to stop the Netlogon service on the new AD server I just installed.

 

[Seaspray0]

Are your passwords over 14 characters? Try changing the password to under 14 characters. Are you using IPSec in secure server mode?

In the domain group policy, Use security configuration and analysis to see what your template settings are compared to the basic settings.

 

[mikeindo]

lonc25, you called microsoft for a hotfix? what was the number???

seaspray0, sadly, the pwds are just 4 characters and we're not complicated enough to use ipsec for anything! but i'll check out your suggestions... thanks!

 

[danomac]

mikeindo,

Are there any events in the server errorlog?

Did you try removing the Windows 98 computer account and rejoining it to the domain with a different computer name?
Are the DNS settings correct?

I'm running out of ideas!

Daniel.

 

[sleew]

Mikeindo, try to set option " Do not require Kerberos..." for new accounts that are loging from w98. Go to account properties on account tab and it's one of the last options in the scrolling window.

Tell me was it helpfull. Srdjan Katic
Microsoft Department Manager
Compaq & Microsoft TS
sleew@infosky.net

 

[GiaBetiu]

Install Directory Services Client for Win9x clients that you have. This will allow your Win9x to use NTLMv2 for authentication.
By default is using LM, it is the wekest one. Did you do some changes to the Domain Security Policies? If yes, you can have problems using LM.
So, try using NTLMv2 (Installing DS Client). Gia Betiu
giabetiu@chello.nl
Computer Eng. CNE 4, CNE 5, MCSE Win2K

 

[ericherich]

Just started having the same problem two days ago. I have a Win2k Server, with 20 Win98 and 1 Win2k Pro clients. Only affected 3 Win98 clients. I discovered in event log ID 5774 "Registration of DNS record failed - DNS operation refused. I realized that I had not setup forward lookup zones. That had now been corrected. I also have been getting Event ID 62 and 64 Time synchronization errors. I have not set this up yet. The message says accumulated time errors will cause network errors???????
I am not getting Domain password you supplied is not correct messages anymore, but I don't think the above caused this problem???? And of course nobody else is at work today. Wait till Monday morning.

Did you get the issued resolved? If so, what worked.