Deploying endpoint software to Windows 2000 clients returns the error 0000002b to the console

  • Article ID: 110519
  • Updated: 10 Dec 2012


You are unable to deploy client-applications to Windows 2000 client-computers. The following error message is displayed in console:

0000002b The installation credentials you entered in the 'Protect computers wizard' are either incorrect or do not give administrator access to the computer over the network

First seen in
Sophos Enterprise Manager 4.7.0
Sophos Control Center 4.0.1
Enterprise Console 4.5.0

when one or other of these consoles is installed on any of the following operating systems:

  • Windows Vista
  • Windows 7
  • Windows 2008
  • Windows 2008 R2

What To Do

Refer to the Microsoft Knowledgebase article: How to enable NTLM 2 authentication.

NTLMv2 must be enabled on Windows 2000 clients. This can be done in one of the following ways:

  • Enabling NTLMv2 in the registry:

    1. Open the following registry key:
    2. Ensure that the value of ‘LMCompatibilityLevel’ is set to a value of ‘1’ or above.

  • Enabling NTLMv2 via Local or Group Policy.  This is described in the Microsoft Knowledgebase article: LAN Manager authentication level.

Technical Information

The reason for this error is that the default value of ‘LMCompatibilityLevel’ is ‘0’. This does not allow NTLMv2 authentication.

If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent