You are unable to deploy client-applications to Windows 2000 client-computers. The following error message is displayed in console:
0000002b The installation credentials you entered in the 'Protect computers wizard' are either incorrect or do not give administrator access to the computer over the network
First seen in
Sophos Enterprise Manager 4.7.0
Sophos Control Center 4.0.1
Enterprise Console 4.5.0
when one or other of these consoles is installed on any of the following operating systems:
- Windows Vista
- Windows 7
- Windows 2008
- Windows 2008 R2
What To Do
Refer to the Microsoft Knowledgebase article: How to enable NTLM 2 authentication.
NTLMv2 must be enabled on Windows 2000 clients. This can be done in one of the following ways:
- Enabling NTLMv2 in the registry:
- Open the following registry key:
- Ensure that the value of ‘LMCompatibilityLevel’ is set to a value of ‘1’ or above.
- Enabling NTLMv2 via Local or Group Policy. This is described in the Microsoft Knowledgebase article: LAN Manager authentication level.
The reason for this error is that the default value of ‘LMCompatibilityLevel’ is ‘0’. This does not allow NTLMv2 authentication.