Hello everyone!
I would definitely appreciate someone pointing me in the right direction. I have a very simple network, e.g. Windows Server 2012 as DC, Windows Server 2008 R2 as RDS and some Windows 7 and Windows XP as workstations.
The problem is that all XP computers are experiencing several problems. There areuserenv 1054, lsasrv 40960 and lsa 40961 events logged on them; those workstations experiencing slow logons, not applying group policies and unable to browse shares located on DC (they used for distributing some files via GP). All Windows 7 workstations, however, are working perfectly.
Here’s what I’ve tried:
- readhttp://technet.microsoft.com/en-us/library/dd560670%28v=ws.10%29.aspx and turned on DES in Kerberos Authentication for entire domain via GP;
- readhttp://technet.microsoft.com/en-us/library/dd566199%28v=ws.10%29.aspx and disabled NTLM 128-bit minimum session security parameters for entire domain via GP;
- tried to make XP Kerberos to use TCP instead of UDP as described inhttp://support.microsoft.com/kb/244474?wa=wsignin1.0
All of these has no luck. XP clients are able to incredibly slow browse SYSVOL and NETLOGON, but unable to browse other shares, not apply GP, etc.
Could anybody please give me some advice?
Thanks in advance.