June 2003
Sun Mon Tue Wed Thu Fri Sat
1 2 3 4 5 6 7
8 9 10 11 12 13 14
15 16 17 18 19 20 21
22 23 24 25 26 27 28
29 30          
May   Jul

 Monday, June 23, 2003
Center for Internet Security Benchmark for SBS2K - Gotcha #2

Yesterday my son decided he wanted to run Win98 again. He has Age of Empires installed on it. So we rebooted his desktop. His machine is dual boot with Win98 and WinXP. The default boot is for WinXP so we have not been in Win98 for quite some time. Guess what? It said I had the wrong password for the network login. I tried several times and locked out the account. It took me a couple of times of locking out the account before I realized that maybe one of my security changes to the Group Policy my have affected the login. This morning I focused my attention on the LAN Manager Authentication Level. I researched the problem  and found that Dsclient can use either Lan Manager or NTLM. It uses Lan Manger by default. If you want to use NTLM  2 as recommended by CIS you must change the registry to enable NTLM Authentification as shown in Q239869 - How to Enable NTLM 2 Authenication.


Comments [] 11:30:09 AM Google It!    

This work is licensed under a Creative Commons License. The licensor permits others to copy, distribute, display, and perform the work. In return, licensees must give the original author credit.

Valid HTML 4.01! Creative Commons License Click here to visit the Radio UserLand website. Subscribe to "a lazy cowboy" in Radio UserLand. Click to see the XML version of this web page. Click here to send an email to the editor of this weblog.