Connecting 98se to NT4 Server

[awergh]

I recently installed NT Server 4 Terminal Server Edition

and have been trying to connect to it but it keeps logging in localy instead of on the domain

[awergh]

ok ive basically got it working so know the policy is implemented.

Should i write something so that other people can find out how to make 98 connect to an nt4 domain with policies

[Renegade_Member]

It could be handy code to have around After all, not too many people are using NT4 to write guides about anymore.

Edited September 18, 2006 by Renegade_Member

[awergh]

Ok ill start writing it, it may take a while and this is for NT4 server and is not the same as 2k\2k3 server because they use active directory. But some of it would be simular. This may also apply to NT 3.x server but I haven’t got them to test it.

First you should setup your NT4 server. It is easiest to start with a new install. During the installer make sure you set it as a primary domain controller rather than a standalone server of a backup Domain controller. If you set it as a standalone server i think you should be able to change it by going into the network settings in the control panel where you can specify the domain name. Once you have you domain it is easiest if you make some more users so that you can set proper policies.

You can create users using administrative wizards and than going into Add User Accounts.

Where you can set the user groups, user name, and some other things.

Or you could go into the User Manger for domains to create your users which is just as simple but more powerful.

Also you need to edit the permission’s for the netlogon folder because that is the normal spot for putting policies for NT and 9x.

Now on 98 (95\98\98se\ME it shouldn’t really mater)

First you really need polyedit (system policy editor)

This site tells you how to install it if you have the windows CD

http://www.windowsnetworking.com/articles_...s/polediti.html

However if you don’t have access or you cant be bothered finding your windows CD these are the various versions of the system policy editor. (I’ve tried the 98 version and found it had more templates which could be useful)

Windows 95 Version

http://www.microsoft.com/windows95/downloa...tor/Default.asp

98 Version

http://www.zisman.ca/files/poledit98.exe

Me Version

http://www.zisman.ca/poledit/poleditME.zip

Once you have polyedit installed or downloaded to a particular folder you should make sure it works. So if you downloaded it you will find that you have to find the templates. This is set in the options.

Now to the network settings.

Go into the control panel and go into the network settings or alternatively right click on the network neighbourhood/my network places icon and go into properties. Go into the properties of Client for Microsoft Networks fill in the check box for Log on to Windows NT Domain. Put your domain name in the text box in my case it was NT4DOMAIN click OK. Now click the Identification Tab, put the domain name int the workgroup textbox. Then go to the Access control Tab select User Access Control and put the Domain Name in the text box which is for where the user list is obtained from. Once done click OK. Windows will want you to restart. This is probably advisable since you reconfigured the network settings. Once you’ve started up again. You need to set the other settings. You don’t need to log onto the domain yet. You can still just press cancel.

Now it is time to make a security policy. Go into Poledit first you should add the administrator account so that you don’t enforce the settings on the administrator account. If you want to add other administrator account or unrestricted accounts put them in now. Now the easiest thing to do is edit the default user account (note that once you edit the default user in your policy that if you insert any other accounts they will inherit the settings for from the default user)

I don’t want to cover all the settings in poledit just right now but I will cover a few. For program access this is basically a white list for programs. when you add a program you just specify the file name eg. notepad.exe

if a program isn’t in the list than it will be disabled.

Now save the policy into the Netlogon folder as config.pol on the server or copy it there using a floppy disk or whatever. Now in Poledit Go to File Open Registry double click on local computer select 98 network, Access control = make sure these things are accurate, Logon = Logon banner if you want, Requiring validation is recommended or rather i think it is sot that you cant use the cancel button, Next you should go to update category and select remote update set update to automatic or manual (not sure about this at the moment ill need to think about it) and set the path for manual update to eg. \\nt4server\netlogon, I recommend ticking display errors option in case you make a mistake. Lost of all go into 98 system, user profiles, Tick Enable User Profiles. save the registry, restart the computer. Now you should be done. and ready to connect to you domain using policies.

This is a work in progress. Feel free to comment or whatever.

[awergh]

so is anyone interested in this and will someone write a guide thingy for 2000 server and 2003 server to go with this one.

[awergh]

oh, no ones interested anyway i have a different problem,

Policies DIE!!!!!!!!

after a few edits the restrictions are aposed on the wrong acounts

grrrrr