Windows NT 4.0-Based Computer Running Terminal Server Does Not Receive User Properties from the Windows Server 2003 Domain Controller

When you use a Windows NT 4.0-based computer that is running Terminal Server, the computer may not receive Terminal Server user properties from a Windows Server 2003 domain controller. For example, a user may log on and not receive their Terminal Server profile or Terminal Server Home Directory as specified in Active Directory Users And Computers.

This behavior can occur if the Windows NT 4.0-based computer that is running Terminal Server attempts to retrieve user information from the Windows Server 2003 domain controller by using a null session (anonymous). Because Windows Server 2003 does not place Anonymous in the Everyone group, Terminal Server does not have permissions to get the information.

To work around this behavior, ensure that "Anonymous Logon" is in the Pre-Windows 2000 Compatible Access group on the Windows Server 2003 domain controller. Both "Anonymous Logon" and "Everyone" need to be in this group to allow backward compatibility with non-Windows Server computers.

This behavior is by design. Anonymous access is removed by default from the Everyone group in Windows 2000.

For additional information about the Pre-Windows 2000Compatible Access group, click the article numbers below to view the articles in the Microsoft Knowledge Base: