Article ID: 297874
Article Last Modified on 10/30/2006
APPLIES TO
- Microsoft Windows 2000 Professional Edition
- Microsoft Windows 2000 Server
- Microsoft Windows NT Server 4.0 Standard Edition
- Microsoft Windows NT Workstation 4.0 Developer Edition
This article was previously published under Q297874
SYMPTOMS
When you try to add a workstation to a domain without pre-creating the computer account, you may receive the following error message:
CAUSE
This problem may occur if the LMCompatibilityLevel registry key has been set to a value of 4 or 5 on the domain controllers, and the client computer's clock is more than 30 minutes faster or slower than the domain controllers.
RESOLUTION
To resolve this problem, make sure that the client computer's clock is synchronized to the domain controller. To do this, add Net TIME to the user logon scripts.
For additional information about how to use the Net TIME command, click the following article number to view the article in the Microsoft Knowledge Base:
120944 Using NET TIME for all Workstations and Servers
MORE INFORMATION
Windows NT LAN Manager version 2 (NTLMv2) was first introduced in Windows NT 4.0 Service Pack 4 (SP4). It is available in all subsequent Windows NT 4.0 service packs, and all versions of Windows 2000 and Microsoft Windows XP Professional. NTLMv2 provides a secure mechanism for client and server authentication and relies on clock synchronization.
For additional information about how to use the LMCompatibilityLevel registry key, click the following article number to view the article in the Microsoft Knowledge Base:
147706 How to Disable LM Authentication on Windows NT
For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
239869 How to Enable NTLM 2 Authentication for Windows 95/98/2000 and NT
Keywords: kberrmsg kbusage kbsecurity kbprb KB297874
