COMMAND

    NTLM

SYSTEMS AFFECTED

    Win2000

PROBLEM

    Myung Bang  found following.   He was  doing some  testing with NT
    security and came acrossed something wierd with Win2K client.   He
    has  a  NT  4.0  Master  domain  and  with all NT DCs, servers and
    clients have  SP6a installed.   Within the  domain, there  are few
    Win2K   clients,   also.     Myung   was   going   to   set    the
    LMCompatibilityLevel to 5 on all DCs, Servers and clients.   Right
    now, all DCs are set to 0 (by default).

    He changed  the LMCompatibilityLevel  to 5  on one  NT 4.0  client
    machine (all DCs are still level  0) and that machine was able  to
    login  to  the  domain  as  he  expected.   Then  he  changed  the
    LMCompatibilityLevel to 5 on Win2K machine, and it could NOT login
    to the domain.  Then  he changed LMCompatibilityLevel to 4  and 3,
    but still can't login.   He changed LMCompatibilityLevel to 0  and
    it will  let You  login again.   LMCompatibilityLevel 0,  1, and 2
    will let You login.

    All documents  states that  clients with  LMCompatibilityLevel 5-0
    can login to Domain where DCs with LMCompatibilityLevel 0.

SOLUTION

    Nothing yet.