Internet Explorer Admin Kit version of IE 5.0 replaces the 128 bit encryption on Windows 2000.

A. If you install a version of IE 5.0 on Windows 2000 created by the Internet Explorer Admin Kit with the 128 bit encryption (IE5DOM.EXE) you may receive the following error:

System cannot log you on because domain <Computer name> is not available.

This is caused by the Rsaenh.dll and Schannel.dll files in Windows 2000 being replaced by the earlier IE 5 versions (but only rsaenh.dll matters).

Basically you should not install IE 5.0 on Windows 2000, it already has 5.01 as part of the core product.

If you do want to distribute a newer version of IE in the future ensure you have the new encryption pack and create a separate build of Internet Explorer that includes the latest 128-bit encryption update for Windows 2000 (Encpack.exe). If this is not available do not include the /n:v switch if you use the Ie5dom.exe component to create a separate build of Internet Explorer for Windows 2000.

To resolve the issue download Encpack.exe and run (or run from the supplied floppy disk if in America).

If the machine cannot be logged in to then you need to use the recovery console to replace rsaenh.dll with the high encryption pack version (or use an alternate NT installation):

  1. Start Recovery Console.
  2. Change to the system32 directory
    cd system32
  3. Check the rsaeng.dll file
    dir rsaenh.dll
  4. Rename the existing rsaeng.dll file
    ren rsaenh.dll rsaenh.old
  5. Insert the floppy disk that contains the high encryption pack files into the floppy drive.
  6. Copy the file rsaengs.dll to rsaeng.dll
    copy a:\rsaenhs.dll rsaenh.dll
  7. Type exit, and then press ENTER to restart the computer normally. Remove the floppy disk from the floppy drive.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.