95 & 2K3 Domains. MS talks tosh.

[BliarOut]

Now the word on the street is a 95 machine "can't" join a 2K3 domain or access it and you have to upgrade to 98 or NT4 >SP4

Effectively, they want you to buy into XP wholesale.

Well what a load of old tosh. I had to connect some 95 machines to a 2K3 network in an emergency today. I bet they haven't done much to the kernel thought I, so I had a bit of a dig in the domain controller security policy. Turned off forced packet signing and NTLM responses only, et voila, on the little beauties went.

In a nutshell, packets on the wire are now at the same level of security as on a 2K domain.

Don't believe the MS selling machine, 9X will work, you just have to lower the packet security to that of a 2K domain. A fair trade off on a secure LAN in my books.

[theexcession]

But won't someone please think of the packets....


Ex

[BliarOut]

theexcession said:

But won't someone please think of the packets.... Ex

Not me Works a treat... Which is nice!

[_DeeJay_]

BliarOut said:

Now the word on the street is a 95 machine "can't" join a 2K3 domain or access it and you have to upgrade to 98 or NT4 >SP4 Effectively, they want you to buy into XP wholesale. Well what a load of old tosh. I had to connect some 95 machines to a 2K3 network in an emergency today. I bet they haven't done much to the kernel thought I, so I had a bit of a dig in the domain controller security policy. Turned off forced packet signing and NTLM responses only, et voila, on the little beauties went. In a nutshell, packets on the wire are now at the same level of security as on a 2K domain. Don't believe the MS selling machine, 9X will work, you just have to lower the packet security to that of a 2K domain. A fair trade off on a secure LAN in my books.

Old news, and documented somewhere on Technet. You can also just install the AD client on 9x to add the security features you'll missing.

MS can't win - everyone tells them their default security settings are too low. They increase them and you get the 'MS are trying to rip us off comments'.

[malman]

Installing the DS client doesn't always work. If you really need a 95 box on and the DS client doesn't do it the only option is to drop the security.

Yes its documented but its tricky to find if you don't know what you're looking for.

[M12_Nathan]

Why would you want a 95 client anywhere near your network?

[_DeeJay_]

M12_Nathan said:

Why would you want a 95 client anywhere near your network?

Absolutely - 95/8/ME all useless (apart from playing games). Having said that, I work for some clients who simply cannot get rid of it (industrial embedded computers etc). It's a PITA though!