Article ID: 281480
Article Last Modified on 11/1/2006
APPLIES TO
- Microsoft Windows NT 4.0 Service Pack 5
- Microsoft Windows NT 4.0 Service Pack 6
This article was previously published under Q281480
SYMPTOMS
After you configure Windows NT 4.0 to use Windows NT LAN Manager version 2 (also known as NTLMv2), your computer may not be able to connect to network resources. When you attempt to use the net use command to connect to a shared resource, you may receive error 1788. This error message maps to the following error message:
Also, after you try to connect to a computer that is in a different domain, the secure channel between the domains appears to be broken.
CAUSE
This problem can occur when the computer that is configured with NTLMv2 tries to authenticate because the computer looks at the wrong data in the buffer. When this occurs, the authenticating computer returns ACCESS_DENIED to the calling computer which causes the secure channel to be broken.
RESOLUTION
A supported hotfix is now available from Microsoft, but it is only intended to correct the problem that this article describes. Apply it only to systems that are experiencing this specific problem.
To resolve this problem, contact Microsoft Product Support Services to obtain the hotfix. For a complete list of Microsoft Product Support Services telephone numbers and information about support costs, visit the following Microsoft Web site:
Note In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The usual support costs will apply to additional support questions and issues that do not qualify for the specific update in question. The English-language version of this fix should have the following file attributes or later:
Date Time Size File name Platform
---------------------------------------------------
12/11/2000 04:34p 80,688 Mup.sys Intel
01/03/2001 05:20p 254,736 Netapi32.dll Intel
01/03/2001 05:20p 192,272 Netlogon.dll Intel
01/03/2001 05:20p 60,176 Wkssvc.dll Intel
12/11/2000 05:04p 142,416 Mup.sys Alpha
01/03/2001 05:17p 412,432 Netapi32.dll Alpha
01/03/2001 05:17p 312,592 Netlogon.dll Alpha
01/03/2001 05:17p 95,504 Wkssvc.dll Alpha
Note Apply this hotfix to the Windows NT 4.0 primary domain controller of the client's domain.
STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.
MORE INFORMATION
This problem can occur under the following circumstances:
- If computer 1 is the domain controller for domain 1
-and-
- If computer 2 is the domain controller for domain 2
-and-
- If there is a two-way trust between domain 1 and domain 2
-and-
- If workstation 1 is a member of domain 1
-and-
- If user 2 is a user in domain 2
If user 2 logs on to workstation 1 and tries to use the net use command to connect to a resource on computer 1 with NTLMv2, user 2 receives error 1788.
For information about how to configure NTLMv2, view the following Microsoft Knowledge Base article:
239869 How to Enable NTLM 2 Authentication
Additional query words: kbwinnt search ssearch winnt
Keywords: kbhotfixserver kbqfe kbbug kbfix kbnetwork kbqfe KB281480
