Setting up a Windows Server 2000 Advance Client-Server network

[chrissucks]

Okay, I'm setting up a client-server network with windows advance server 2000. I have the clients all set up perfectly but i'm having some troubles with the server (i've tested teh clients on other servers to make sure they're alright). Can anyone help me out? I have my active directory and dns and stuff set up but when a client tries to connect i get "no server was available to validate your login". The clients are windows 98. I currently have my server plugged into port 1 on the hub, not uplink. Uplink didn't seem to do me any use..

[bwcc]

Your workstations are joined to the domain already? Can you ping the server from a workstation?

If the workstations are using static IP assignments need to have the primary DNS set to that of the server. Make sure you have DNS forwarders set on the server DNS service to point to your router (if you are using internet access at the site). If you are using DHCP, use your server as the DHCP server, not a router.

[chrissucks]

Thanks for your reply,

I am using a hub, not a router to connect these. I am doing a local test on getting this network running before I go long-range. So right now, it is not accessing the internet. There is no DHCP installed on the system (althoguh the DHCP program is there). Not quite sure where to go from here...


Thanks

[bwcc]

Ok, so you're using static IP's on the workstations then? Just make sure that the primary DNS entry is the IP address of your server. They should be able to join / view the server then.

[johnnyis42]

go into the DNS snap in and delete the "." entry so it doesn't think it's a root server.

[kwebb]

Typically you'd only see the ./root entry with an upgrade but if you see that in your DNS console then yeah, by all means delete it.

98 Machines cannot actually join a domain. They can login using AD supplied credentials and use DNS to get to domain resources.

Make your 98 workgroup names the same as the domain name. This will help browsing a little but shouldn't really have anything to do with whether or not they can authenticate or not. They authenticate with user credentials however. There is no computer account for a 98 machine. They cannot receive GPO's etc. You have to use login scripts if you wanted to edit poledit on those machines. Or do that individually.

As mentioned, make sure your primary dns server is the Domain Controller. If your still having problems go ahead and cancel on the MSNet login client and see if you can ping the DC.

[chrissucks]

all that is set up correctly. Users can ping server. Still cannot log on to domain. "No domain was available to validate your password" (message given on login from windows 98 computer)

[johnnyis42]

i haven't had to deal with this in a long time, and i'm sorry i'm not going to bring up a 98 machine to test it.... but i seem to remember somehting about the domain policy on the domain controller regarding legacy login authentication, like that they use guest credentials or something, or that you need to specify an account that they use since the machine can't actually have an account themselves.

go through the user rights and asignments portion of the GP editer, you might find it there.

[SeanC]

There's a program for Windows 98 clients to allow them to use WIndows 2000 AD domains I believe. Make sure that's installed on all the 98 machines.

One other point, is the AD using an authentication protocol compatible with Win98? I'm pretty sure Win98 can't use Kerberos, unfortunately I can't remember what protocols it does support.

Sean

[johnnyis42]

it supports MSCHAP v1, PAP and some other silly thing. definitely not kerberos