JSI Tip 2122. How can I use a Windows NT 4.0 RAS/RRAS server in a Windows 2000 domain?

The Windows NT 4.0 RAS/RRAS server must be able to validate the user's dial-in authority with a Windows 2000 domain controller.

To accomplish this, the Windows NT 4.0 RAS/RRAS server must be running Service Pack 4 or greater.

When you ran DCPROMO to create the domain, you must have selected the allow pre-Windows 2000 servers to access Active Directory option.

If the above 2 conditions are true, you need make no further adjustments.

If you didn't allow pre-Windows 2000 servers to access Active Directory, open a CMD prompt on the domain controller and type:

net localgroup "Pre-Windows 2000 Compatible Access" everyone /add

and restart your domain controller.

When Windows NT 4.0 servers no longer exist in the domain, type:

net localgroup "Pre-Windows 2000 Compatible Access" everyone /delete

and restart your domain controller. This removes the ability of anonymous users to read domain information.


Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish