Adding Vista computers to NT 4 domain

I found an interesting post on a Microsoft forum that provides insight on how to add a Vista computer to a legacy NT 4.0 domain. This worked on a pre-SP1 Vista machine. I still need to test on a SP1 machine.

From a domain controller or member server open up Server Manager (SRVMGR.EXE)

• Click on Computer then Add to domain…
• Type the Vista computer’s hostname and click Add
• Click Cancel and close Server Manager

From the Vista computer you need to open the Local Security Policy console

• Click Start and type “secpol.msc” in the search area and press Enter
• Expand Local Policies and click on Security Options on the left pane
• On the right pane look for “Domain Member: Digitally Encrypt or sign secure channel data (always)“
• Double click on it and change it from Enabled to Disabled
• Now look for “Network Security: LAN Manager authentication level“
• Change it to “Send LM and NTLM – use NTLMv2 session security if negotiated“
• File then Exit

Now you are ready to add the Vista computer to the domain.

• Click on Start
• Right click on Computer and select Properties
• Click on Advanced system settings on the left pane
• Click the Computer Name tab
• Click the Change button
• Change Member of to Domain: and enter your domain name and click OK

You should then be prompted for your Domain Admin credentials

wizTEQ Staff