Microsoft KB Archive/298861

= After you switch from mixed mode to native mode in Windows 2000, clients cannot log on to a Windows 2000 domain =

Article ID: 298861

Article Last Modified on 10/26/2006

-

APPLIES TO


 * Microsoft Windows 2000 Service Pack 1
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Service Pack 1

-



This article was previously published under Q298861





SYMPTOMS
After you switch a Microsoft Windows 2000 domain from mixed mode to native mode, Windows 2000-based client computers cannot log on to the domain.



CAUSE
This problem occurs when a domain user on the Windows 2000-based computer tries to authenticate to the domain by using the Kerberos protocol, and the Windows NT hash for the domain user account is not available or is missing on the Windows 2000-based client computer. In this case, authentication fails, and the system does not try to authenticate by using NTLM authentication.

By default, the Windows 2000-based client first tries to use Kerberos authentication in a Windows 2000 domain if all other computers that are involved in the logon are also running Windows 2000. For example, a domain user on a Windows 2000-based client computer will try to use Kerberos authentication when the user authenticates to a Windows 2000-based domain controller that is part of the same forest. However, if Kerberos authentication fails, NTLM is used to authenticate the domain user account.



RESOLUTION
To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

260910 How to obtain the latest Windows 2000 service pack



STATUS
This problem was first corrected in Windows 2000 Service Pack 3.



MORE INFORMATION
For additional information about how to install Windows 2000 and Windows 2000 hotfixes at the same time, click the following article number to view the article in the Microsoft Knowledge Base:

249149 Installing Microsoft Windows 2000 and Windows 2000 hotfixes

Keywords: kbbug kbfix kbwin2000presp3fix kbqfe kbwin2000sp3fix kbsecurity kbhotfixserver KB298861

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.