OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Problem with 2000 Pro client on NT 4 domain
From: Dimitri Limanovski (DimitriEXETER.COM)
Date: Tue Jul 11 2000 - 12:17:17 CDT

From what I've seen so far, there is no way to create a two-way trust
between Win2K and WinNT 4.0 domains..
Dimitri

-----Original Message-----
From: Focus on Microsoft Mailing List
[mailto:FOCUS-MSSECURITYFOCUS.COM]On Behalf Of Doug Edmonds
Sent: Tuesday, July 11, 2000 9:05 AM
To: FOCUS-MSSECURITYFOCUS.COM
Subject: Re: Problem with 2000 Pro client on NT 4 domain

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

It sounds to me like all your sys admin needs to do is create a
computer account for your computer in your company's NT Domain.

Win9x machines don't actually join domains. They join workgroups
that have the same name as the domain and thus are able to be seen in
the Network Neighborhood. But for NT/W2k machines, each computer has
to have a computer account setup in the domain (under Server Manager)
before it can participate in the domain. You will want to give your
sys admin the name of your computer (the name that should appear in
the Network Neighborhood) and he can create an account for it. It
should take about 1 minute to do.

The other option is to have your own domain (you would of course need
W2k Svr or Adv Svr) and set up a trust relationship with the NT 4
domain.

Since this whole scenario is with your company, I would assume that
setting up a trust relationship is out. The least number of trusts
the better. Also, it is much easier to just add your computer to the
domain then to setup a trust.

Doug Edmonds
dweezilvt.edu

- -----Original Message-----
From: Ronald Taylor [mailto:rtaylorI-55.COM]
Sent: Monday, July 10, 2000 10:34 PM
To: FOCUS-MSSECURITYFOCUS.COM
Subject: Problem with 2000 Pro client on NT 4 domain

I recently got hooked up with a T1 line into my apartment and on on
my
company's LAN. There is an NT 4 domain setup for the computers to log
into.
I have a Windows 2000 Professional machine hooked up to the LAN. I
can join
the workgroup, and can see all of the other computers, but the others
cannot
see me. When I try to log into the domain it gives me an error
message to
the effect of "the domain you are logging into does not have a
computer
account setup" and something about a trust relationship. (sorry I
could not
be more specific, i know how annoying it is not knowing the actual
error
message) I think it is just seeing the 2000 machine as a NT 4 server
. . .
I have to also admit that I am pretty much a paper MCP :( I am
certified in
NT Server 4 . . I feel indredibly stupid for not knowing how to do
this but
I have little experience with NT in a full fledged network
envoriment. I was
able to fix any problems I had with my very small NT network I had.
Please
feel free to flame me about my lack of experience, but also i would
appreciate the help.

Oh, and my sys Admin. wont help me . . he says he doesn't know how
(all of
his experience is with Novell and Unix) and he is incredibly busy.

I appreciate any help you can give me.

- -Ron
suxtobemei-55.com

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com>
Comment: PGP Key for Doug Edmonds

iQA/AwUBOWsbdWpakWN4pbfjEQKDtQCg+2Gv8bS9DI8OAw1N+tb7sXz/7q0AoNmV
ynVgpCh6xwC9bg5WbqZy1Uvp
=PUz3
-----END PGP SIGNATURE-----