Client Cannot Log On If Unicode String Is Passed to NTLM Security Support Provider Interface

When a program that is running in Windows 95 or Windows 98 attempts to connect to a Microsoft Windows NT-based or Microsoft Windows 2000-based server by using Windows NT LAN Manager (NTLM) security services and prompts you for credentials (your user name and password), the connection attempt may sometimes not succeed.

If your user name and password are passed by the program to the NTLM Security Support Provider interface (SSPI) in the form of Unicode strings, the credentials may not be successfully created.

A supported fix is now available from Microsoft, but it is only intended to correct the problem that is described in this article. Apply it only to computers that are experiencing this specific problem.

To resolve this problem, contact Microsoft Product Support Services to obtain the fix. For a complete list of Microsoft Product Support Services phone numbers and information about support costs, visit the following Microsoft Web site:NOTE: In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The usual support costs will apply to additional support questions and issues that do not qualify for the specific update in question.

The English version of this fix should have the following file attributes or later:

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

For additional information about other issues that are resolved by this hotfix, click the article number below to view the article in the Microsoft Knowledge Base: For additional information about Windows 98 and Windows 98 Second Edition hotfixes, click the article number below to view the article in the Microsoft Knowledge Base: For additional information about Windows 95 hotfixes, click the article number below to view the article in the Microsoft Knowledge Base:

Directory Service Client conflict information

The hotfix that is described in this article is not fully compatible with the Windows 95 or Windows 98 Directory Service client. The Windows 95 and Windows 98 Directory Service client contains a version of the Secur32.dll file that provides additional functionality that is not included in the version of the Secur32.dll file that is included with Windows 95, Windows 98, and Windows 98 Second Edition. This hotfix also does not provide the additional Directory Service client functionality. Therefore, the order in which you install this hotfix relative to the Directory Service client is critical. You must install this hotfix after you install the Directory Service client is installed. If you install the Directory Service client after you install this hotfix, you must then reinstall the hotfix. This is necessary because of the behavior of the Directory Service client installation program.

For additional information about Directory Service client version conflicts, click the article number below to view the article in the Microsoft Knowledge Base: For additional information about the Directory Service client for Windows 95 and Windows 98, click the following article number to view the article in the Microsoft Knowledge Base: