Differences between version 3 and previous revision of RequireSignOrSeal.
Other diffs: Previous Major Revision, Previous Author, or view the Annotated Edit History
| Newer page: | version 3 | Last edited on Tuesday, July 30, 2002 3:31:54 pm | by CraigBox | Revert |
| Older page: | version 2 | Last edited on Tuesday, July 30, 2002 3:31:01 pm | by CraigBox | Revert |
@@ -1,19 +1,19 @@
Windows XP tries to sign or seal the secure channel between the workstation and the domain controller. This causes the following error:
-
Windows cannot connect to the domain either because the domain controller is down or otherwise unavailable or because your computer account was not found.
+__
Windows cannot connect to the domain either because the domain controller is down or otherwise unavailable or because your computer account was not found.__
The domain controller may record:
-Event ID: 5723
+__
Event ID: 5723__
-
The session setup from the computer <Computername> failed to authenticate. The name of the account referenced in the security database is <Computername>. The following error occurred: Access is denied.
+__
The session setup from the computer <Computername> failed to authenticate. The name of the account referenced in the security database is <Computername>. The following error occurred: Access is denied.__
The client may record:
-
Event Source: NETLOGON
- Event ID: 3227
- Description: The session setup to the Windows NT or Windows 2000 domain controller \\<ServerName> for the domain <DomainName> failed because \\<ServerName> does not support signing or sealing the Netlogon session. Either upgrade the domain controller or set the RequireSignOrSeal registry entry on this machine to .
+__
Event Source: NETLOGON__
+__
Event ID: 3227__
+__
Description: The session setup to the Windows NT or Windows 2000 domain controller \\<!
ServerName> for the domain <!
DomainName> failed because \\<!
ServerName> does not support signing or sealing the Netlogon session. Either upgrade the domain controller or set the !
RequireSignOrSeal registry entry on this machine to .__
!!Option 1: Manual registry editing
Start Regedit, navigate to:
@@ -42,8 +42,8 @@
Save the followig text to requiresignorseal.reg and then right click->Merge
REGEDIT4
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
+ [
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
"requiresignorseal"=dword:00000000
This file can be found in the docs/Registry directory of the Samba 2.2.2 source distribution as WinXP_!SignOrSeal.reg.
