Logon Authentication, Active Directory Replication, and Domain Joins Do Not Complete Successfully (315150)
The information in this article applies to:
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Professional
- Microsoft Windows 2000 Server
This article was previously published under Q315150 SYMPTOMSYou may experience one or more of the following administrative issues on your network: - Logon authentication does not complete successfully.
- Active Directory replication does not complete successfully.
- An operation to join a domain does not complete successfully.
CAUSEThis issue occurs because Kerberos ticket requests by Microsoft Windows 2000 clients may experience fragmentation on a wide area network (WAN) or on a dial-up network, and this causes Kerberos-authenticated operations (such as logon authentication, Active Directory replication, and domain joins) to fail. Network fragmentation also prevents Kerberos Distribution tickets from receiving Kerberos ticket request that are sent by clients.
MORE INFORMATIONThe Windows Kerberos Authentication package is the default in Windows 2000 and in Microsoft Windows XP. The Kerberos Authentication package coexists with challenge/response (NTLM) authentication, and it is used in instances where both a client and a server can negotiate Kerberos.RESOLUTION
To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
260910 How to Obtain the Latest Windows 2000 Service Pack
STATUSMicrosoft
has confirmed that this is a problem in the Microsoft products that are listed
at the beginning of this article.
This problem was first corrected in Windows 2000 Service Pack 4.
| Modification Type: | Minor | Last Reviewed: | 9/27/2005 |
|---|
| Keywords: | kbHotfixServer kbQFE kbWin2000preSP4Fix kbfix KB315150 kbAudITPRO |
|---|
|