Article ID: 905596
Article Last Modified on 10/11/2007
APPLIES TO
- Microsoft Windows Server 2003, Enterprise Edition
- Microsoft Windows Server 2003, Standard Edition (32-bit x86)
- Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
- Microsoft Windows Server 2003, Enterprise x64 Edition
- Microsoft Windows Server 2003, Standard x64 Edition
- Microsoft Windows Server 2003, Datacenter x64 Edition
- Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
- Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
SYMPTOMS
When you create a connection request policy that has the Accept users without validating credentials authentication method enabled on a computer that is running Microsoft Windows Server 2003, you notice that Internet Authentication Service (IAS) still generates a value for the Class attribute. You may also notice that the Connection Request Policy Wizard does not display the Generate-Class-Attribute attribute.
RESOLUTION
Service pack information
To resolve this problem, obtain the latest service pack for Windows Server 2003. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
889100 How to obtain the latest service pack for Windows Server 2003
Hotfix information
Prerequisites
No prerequisites are required.
Restart requirement
You do not have to restart the computer after you apply this hotfix.
Hotfix replacement information
This hotfix does not replace any other hotfixes.
File information
The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.
Windows Server 2003, 64-bit Itanium-based versions
| File name | File version | File size | Date | Time |
|---|---|---|---|---|
| Wdnary.mdb | Not applicable | 294,912 | 02-Sep-2005 | 11:07 |
Windows Server 2003, 32-bit x86-based versions
| File name | File version | File size | Date | Time |
|---|---|---|---|---|
| Dnary.mdb | Not applicable | 294,912 | 02-Sep-2005 | 21:26 |
Windows Server 2003, 64-bit x64-based versions
| File name | File version | File size | Date | Time |
|---|---|---|---|---|
| Wdnary.mdb | Not applicable | 294,912 | 02-Sep-2005 | 11:07 |
STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section. This problem was first corrected in Windows Server 2003 Service Pack 2.
MORE INFORMATION
After you apply this hotfix, both the remote access policy and the connection request policy contain the Generate-Class-Attribute attribute. You can set the Generate-Class-Attribute attribute in either the remote access policy or the connection request policy. However, you cannot set the Generate-Class-Attribute attribute in both the remote access policy and the connection request policy. This is because IAS cannot decide which setting takes a higher priority and overwrites the other setting. If you set the Generate-Class-Attribute attribute in both the remote access policy and the connection request policy, IAS discards the settings and generates a value for the Class attribute.
For more information, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates
Additional query words: CRP RAP
Keywords: kbbug kbfix kbqfe kbhotfixserver kbwinserv2003sp2fix KB905596
