FIX: COM+ 1.0 Catalog Requires NTLM-based Authentication

Retired KB Content Disclaimer

View products that this article applies to.

This article was previously published under Q275482

SYMPTOMS

If NTLM-based authentication is disabled on the Domain Controller (for instance, to create a more secure environment on Microsoft Windows 2000 domains), you cannot set the identity of a COM+ application to a particular user.

Back to the top

CAUSE

The COM+ Catalog uses NTLM authentication to verify the user name and password that you specify to set the RunAs identity of a COM+ application.

Back to the top

RESOLUTION

To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

260910 (http://support.microsoft.com/kb/260910/EN-US/ ) How to Obtain the Latest Windows 2000 Service Pack

Back to the top

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Windows 2000 Service Pack 2.

Back to the top

MORE INFORMATION

Steps to Reproduce Behavior:

In the DC Group Policy editor, set the LAN Manager Authentication level to Send NTLMV2 response only \refuse LM and NTLM.
Create a COM+ application on the member workstation or server, and set the identity to a valid domain user.
The following information appears in the security log:
Reason: Unknown user name or bad password
User Name: SomeUser
Domain: SomeDomain
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: SomeWorkstation
In addition, a message box states that the user name and password are incorrect.

Back to the top

APPLIES TO

Microsoft COM+ 1.0

Back to the top

kbbug kbfix kbsecurity kbsysadmin kbwin2000presp2fix KB275482

Back to the top

Retired KB Content Disclaimer

This article was written about products for which Microsoft no longer offers support. Therefore, this article is offered "as is" and will no longer be updated.

Back to the top