Article ID: 254155
Article Last Modified on 11/1/2006
APPLIES TO
- Microsoft Windows 2000 Server
This article was previously published under Q254155
SYMPTOMS
When you set up a Microsoft Windows 2000-based computer to be a remote access server in a Microsoft Windows NT 4.0-based domain, the Windows 2000-based remote access server cannot authenticate users who are members of another Windows 2000-based domain, even when a trust relationship has been established between the Windows NT 4.0-based domain and the Windows 2000-based domain.
RESOLUTION
To work around this behavior, use one of the following methods:
- Move the Windows 2000-based remote access server from the Windows NT 4.0-based domain to the Windows 2000-based domain. This configuration enables the remote access server to query either the Windows 2000 Active Directory or a trusted Windows NT 4.0-based domain.
OR
- Set up an Internet Authentication Service (IAS) authentication server as a member of the Windows 2000-based domain. Remote access authentication requests against this server can successfully query either the Windows 2000-based domain or a trusted Windows NT 4.0-based domain.
Additional query words: win2krelnotes
Keywords: kbprb KB254155
