Microsoft KB Archive/946405

From BetaArchive Wiki
Knowledge Base


Client computers may not work correctly when you add a Windows Server 2008-based domain controller to an existing pre-Windows Server 2008 domain

Article ID: 946405

Article Last Modified on 12/27/2007



APPLIES TO

  • Windows Server 2008 Datacenter
  • Windows Server 2008 Enterprise
  • Windows Server 2008 for Itanium-Based Systems
  • Windows Server 2008 Standard



SYMPTOMS

When you add a Windows Server 2008-based domain controller to an existing pre-Windows Server 2008 domain that uses the default domain policies, client computers in the domain may not work correctly.

CAUSE

This problem may occur if the Security Templates files for the NoLMHash policy setting on the Windows Server 2008-based domain controller do not match the Security Templates files for the NoLMHash policy setting on the pre-Windows Server 2008-based domain controllers.

When you perform a clean install of Windows Server 2008 and then install the Active Directory directory service on the computer, the Security Templates files are modified to enable the NoLmHash policy.

Keywords: kbexpertiseadvanced kbtshoot kbprb KB946405