WinXP login prompt AFTER Novell authentication!?!?

[gillis]

Hello,

We're having a heck of a time after upgrading desktop PC's from Win98 to XP on a Netware 6 server. Win98 didn't care who you were so authenticate using Novell client and you're in!

With XP, Windows insists upon prompting for login AFTER the Novell authentication. It is confusing users who either check the box "match passwords" or try to put a p.w. into the Windows prompt even though we've set them up with a blank default p.w.

There must be some way between Netware client and WinXP to overcome this WITHOUT resorting to registry stuff??

Please if you have any experience with this or ideas, they would be very welcome.

Thanks, JGiles

 

[AJ1982]

Dymanic Local User Policy can be your friend.

===

Fatman Superstar (Andrew James)

CCNA,
(CCNA Cisco Academy Instructor Trained)

 

[terry712]

yep dlu is the way to go

 

[gillis]

Thanks for the 2 replies; I'm sure they were meant to be helpful - however, I don't know what you're talking about. Looking up DLU, the references I see seem to associate with Zenworks, which we're not using. Sorry but I have to plead ignorance here. Could you boil it down for me?

Thanks a lot,

Jgiles

 

[terry712]

ok as you need to login to xp - ie you need a local account on pc to utilse it - you need a way to get the network to create this account as you can keep running to a pc locally or remotely to create an account. this is were dlu comes in - you can tell it to create a user on the pc and give it whatever rights. and yes it is with zen.

i beleive all you need though - not sure if you still get it though is the free starter pack

to be truthful though a network without zen is well like

hell

 

[gillis]

Thanks Terry712

I've heard good things about Zenworks and we toyed with purchase but $$$ got in the way; so for the time being I have to live without.

Thanks for your tips,

jgiles

 

[marvhuffaker]

If you're on the novell 4.9x client, there is an option for passing the Novell login account through to the Windows account. This has proved useful in situations where ZENworks was not an option.

Still though, you'll have to have local accounts created for each user that logs in which is more hassle than using DLU (Dynamic Local User).

Marvin Huffaker MCNE, CNE
Marvin Huffaker Consulting

http://www.redjuju.com

 

[gillis]

Thanks, Marvin

Yes, I looked at the option you mentioned; however, as you say, it really doesn't address our problem of multiple netware users on the same PC. We'd like to maintain the ability for people to be able to log in anywhere to do their work. And that, of course, means Windows has to 'know' everyone who may potentially login.

We are currently exploring a TID suggestion that, with a few registry changes, seems to accomplish what we want. It deals with AutoAdminLogon for both Microsoft & Novell.
Perhaps it will work until we can eventually move toward Zenworks.

Thanks again to all for your suggestions.

jgiles

 

[marvhuffaker]

What I really love about that registry hack that you're talking about, is that it totally defeats your network security. Microsawpht was really thinking when they came up with that one. Why not just eliminate all usernames and passwords and login everyone as ADMIN.

About ZENworks... How may users in your network? How many users? If you have less than 100, you should look at buying NetWare 6.5 Small Business Suite. You can upgrade your servers to the latest versions, plus you get ZENworks, GroupWise, and Bordermanager included for no extra charge. Unbeatable.

Marvin Huffaker MCNE, CNE
Marvin Huffaker Consulting

http://www.redjuju.com

 

[terry712]

can you not install the zen 2 starter pack - as it's only really schema extensions you need - this will not give you lots of policy control over xp - but it will give you a dlu - thats functional

 

[ductTape]

I have played with the registry "hack" you are talking about with some success. But you will have to first create a locked down user account on all of the local machines with no password. Then change the registry keys to login with this account instead of the admin.