[ILUG] (no subject)

[Ray Kelly]

On Thu, 24 Jan 2002, Kenn Humborg wrote:
>
> It won't work with NT4, (but might with W2K).

> Here's why:
>
[snip bitz bout NT domains auth]

> You can see this by joining an NT4 box to a domain, saving off
> an image of the complete machine, rebooting and logging in a
> few times and then restoring the image.  The PDC won't give it
> the time of day any more until you set up a new computer account
> for it.
>
> Real PITA when you're using imaging to test installations and
> stuff on NT4.

I've come across this in the past with disk images, but I know that
there's a way around it, I some how managed to do it once upon a time
though for the life of me I can't remember how beyond merging in bits of
registry & that all the machines I was playing with were NT4 sp3 (it was
quite some time ago)

> Now, for some reason, W2K (on the client) with an NT4 PDC doesn't
> seem to have this problem.  I've never had trouble re-joining an
> NT4 domain from a W2K Pro box after restoring from an image.
>
> This means that there is some back-door hack that convinces the
> PDC to let the machine join even though the shared secret doesn't
> match.  So in principle, NT4 could be modified to use this hack
> too...  Which kind of blows massive holes through the domain
> membership model.

which was kinda along the line of what I was curious about.
if win2k will work & nt4 does (after having sacrificed a chicken
& virgin to appease the the gods) presumably Samba will too & hopefully
without causing too much damage to one's sanity or the young female
population.

I'd admit that for the original problem, keeping different machine names
under Lunux/NT is (by large values of) _far_ the easiest solution.

	Ray ...