Article ID: 281568
Article Last Modified on 3/2/2007
APPLIES TO
- Microsoft Windows Server 2003, Standard x64 Edition
- Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
- Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows NT Server 4.0, Terminal Server Edition
This article was previously published under Q281568
SYMPTOMS
When you use a Windows NT 4.0-based computer that is running Terminal Server, the computer may not receive Terminal Server user properties from a Windows Server 2003 domain controller. For example, a user may log on and not receive their Terminal Server profile or Terminal Server Home Directory as specified in Active Directory Users And Computers.
CAUSE
This behavior can occur if the Windows NT 4.0-based computer that is running Terminal Server attempts to retrieve user information from the Windows Server 2003 domain controller by using a null session (anonymous). Because Windows Server 2003 does not place Anonymous in the Everyone group, Terminal Server does not have permissions to get the information.
RESOLUTION
To work around this behavior, ensure that "Anonymous Logon" is in the Pre-Windows 2000 Compatible Access group on the Windows Server 2003 domain controller. Both "Anonymous Logon" and "Everyone" need to be in this group to allow backward compatibility with non-Windows Server computers.
STATUS
This behavior is by design. Anonymous access is removed by default from the Everyone group in Windows 2000.
MORE INFORMATION
For additional information about the Pre-Windows 2000Compatible Access group, click the article numbers below to view the articles in the Microsoft Knowledge Base:
236185 Terminal Server User Profiles and Home Folder Paths Are Ignored After Applying SP4 or Later
257988 Description of Dcpromo Permissions Choices
240855 Using Windows NT 4.0 RAS Servers in a Windows 2000 Domain
257942 Error Message: Unable to Browse the Selected Domain Because the Following Error Occurred...
Keywords: kbprb KB281568
