Add Workstation Fails with RestrictAnonymous

An error occurs when the Remoteboot service attempts to update the Access Control List (ACL) on new workstations in the Rpl files\Workstations folder. The service appears to be attempting an anonymous user connection to the PDC (Primary Domain Controller) to enumerate the SID (Security Identifier) for the Remote Boot workstation account to apply to the directory and fails because of the Restrict Anonymous setting. The following error message appears:

The machine account is created correctly using a valid account but, while accessing the ACL, it uses a null user name.

To resolve this problem, obtain the latest service pack for Windows NT 4.0 or Windows NT Server 4.0, Terminal Server Edition. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

Microsoft has confirmed that this is a problem in Windows NT 4.0 and Windows NT Server 4.0, Terminal Server Edition. This problem was first corrected in Windows NT 4.0 Service Pack 4.0 and Windows NT Server 4.0, Terminal Server Edition Service Pack 4.

This only fails when the Remoteboot manager is run on a BDC or a member server.