NTLM Authentication Issues

Presently we have in our main location this type of setup:
1 2000 DC-Master Browser, PDC emulator, NTLM level 0
1 2003 DC-All remaining FSMO roles, NTLM level 2, DNS, WINS
1 2003 DC-no FSMO roles, Global Catalog, NTLM level 2, DNS

What we are seeing is that when someone connects via vpn they get challenged
for credentials when they try to access network shares or when they attempt
to access Outlook. Also when down level clients (NT, 98, 95) are on the
internal lan they get the same challenges and sometimes they cannot get to
these shares. None of this was happening prior to introducing the 2003 DC's.
None of the clients have the AD client package isntalled as it was not an
issue before.

Could the different levels of NTLM between the 3 DC's be causing the
problem? I really need to find a resolution to this challenge/response
issue on the network. If anyone has any suggestions please let me know.

Thanks

"Jeff M" <(E-Mail Removed)> wrote in message
news:8E942086-D171-428E-8005-(E-Mail Removed)...
> Presently we have in our main location this type of setup:
> 1 2000 DC-Master Browser, PDC emulator, NTLM level 0
> 1 2003 DC-All remaining FSMO roles, NTLM level 2, DNS, WINS
> 1 2003 DC-no FSMO roles, Global Catalog, NTLM level 2, DNS

> Could the different levels of NTLM between the 3 DC's be causing the
> problem? I really need to find a resolution to this challenge/response
> issue on the network. If anyone has any suggestions please let me know.

Make them all the same level,...even if that isn't the problem.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/t...dance/2004.asp
http://www.microsoft.com/isaserver/t...dance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Deployment Guidelines for ISA Server 2004 Enterprise Edition
http://www.microsoft.com/technet/pro...isaserver.mspx
-----------------------------------------------------