Mac Forum / Applications / Other MS Products / August 2007

<snip>

ya git!  it's in hte bloody subject :^\

<snip>

betcha its the dc security policy.  it my  connexion to an ad server
thru the admin share was borked after promoting a member server to ad
role.  

if yer getting an message like "username or password is incorrect" even
when ya know they're right, you're a candidate for this fix.

if ya have the service pack and all updates installed its like this:

"Configure security settings to allow SMB connections:
1. Allow unencrypted connections in the Default Domain Controller and
Default Domain Group Policies: [Active Directory Users and Computers]
In the Default Domain Controller Policy \ Computer Configuration \
Windows Settings \ Security Settings \ Local Policies \ Security
Options, find ³Microsoft network server: Digitally sign communications
(always)² and ³Microsoft network server: Digitally sign communications
(if client agrees)². Define both of these policies as ³Disabled²:"
http://weblog.bignerdranch.com/?p=6

in my case i had to set the dc to allow lm and ntlm responses, with
ntlm2 preferred, as well (tho' this is *not* preferred for security
reasons
http://www.windowsecurity.com/articles/Protect-Weak-Authentication-Proto
cols-Passwords.html )

  hth