Add Workstation Fails with RestrictAnonymous (192126)

The information in this article applies to:

Microsoft Windows NT Server 4.0 Terminal Server Edition
Microsoft Windows NT Server 4.0
Microsoft Windows NT Server, Enterprise Edition 4.0

This article was previously published under Q192126

SYMPTOMS

An error occurs when the Remoteboot service attempts to update the Access Control List (ACL) on new workstations in the Rpl files\Workstations folder. The service appears to be attempting an anonymous user connection to the PDC (Primary Domain Controller) to enumerate the SID (Security Identifier) for the Remote Boot workstation account to apply to the directory and fails because of the Restrict Anonymous setting. The following error message appears:

The following error occurred updating the file permissions for
workstation <xxxx>.
Windows NT error 0xc0000022

CAUSE

The machine account is created correctly using a valid account but, while accessing the ACL, it uses a null user name.

RESOLUTION

To resolve this problem, obtain the latest service pack for Windows NT 4.0 or Windows NT Server 4.0, Terminal Server Edition. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

152734 How to Obtain the Latest Windows NT 4.0 Service Pack

STATUS

Microsoft has confirmed that this is a problem in Windows NT 4.0 and Windows NT Server 4.0, Terminal Server Edition. This problem was first corrected in Windows NT 4.0 Service Pack 4.0 and Windows NT Server 4.0, Terminal Server Edition Service Pack 4.

MORE INFORMATION

This only fails when the Remoteboot manager is run on a BDC or a member server.

Modification Type:	Major	Last Reviewed:	6/24/2004
Keywords:	kbbug kbfix KB192126