Unnecessary LSA Replication Traffic Is Sent to Windows NT 4.0 and 3.5x Domain Controllers in a Mixed Domain (255295)

SYMPTOMS

When you operate a Windows 2000-based mixed domain that contains backup domain controllers (BDCs) that are running Microsoft Windows NT version 3.51 or 4.0, unnecessary replication traffic may be directed at the down-level domain controllers. Note that the amount and frequency of traffic depends on the Group Policy refresh interval. Also, you may receive events that are similar to the following event in the Security Event log on the Windows 2000-based domain controller:

ID: 643 Domain Policy Changed:
Password Policy modified
Caller User Name: PDCname$
ID: 617 Kerberos Policy Changed:
Changed By: User Name: PDCname$
Changes made: -

RESOLUTION

To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

260910 How to Obtain the Latest Windows 2000 Service Pack

NOTE: To view the version, right-click the file in Windows Explorer, click Properties on the menu that appears, and then click the Version tab.

STATUS

Microsoft has confirmed that this is a problem in Microsoft Windows 2000.

This problem was first corrected in Windows 2000 Service Pack 1.

MORE INFORMATION

For additional information about how to install Windows 2000 and Windows 2000 hotfixes at the same time, click the article number below to view the article in the Microsoft Knowledge Base:

249149 Installing Microsoft Windows 2000 and Windows 2000 Hotfixes