Cannot join a Windows NT domain with a Windows Vista Business SP1 PC

I am trying to test if Windows Vista can be used for our current software at work as there is very little choice when purchasing new PC's and laptops these days. I have already failed the first test!
When I try to join our company Windows NT domain I get the error:
"The following error occured attempting to join the domain 'domainname'.
Logon failure: unknown user name or bad password"

I have done the following based on searches:

1. Added computer name to NT domain via NT Server Manager
2. Made the following changes to the Vista PC's Local Security Policy:
Local Security Policy (start | secpol.msc) | Local Policies | Security Options
Domain member: Digitally encrypt or sign secure channel data (always) - Disabled
Network security: LAN Manager authentication level - Send LM & NTLM - use NTLMv2 session security if negotiated
3. Disabled Windows Firewall
4. Checked that the PC has a WINS server address and it is correct
5. Some have mentioned a blank MAC address but MAC address looks ok.

I have run out of ideas.

And no, I cannot upgrade the domain controllers to Windows 2000/2003 or anything else.

Please help. Others seem to have worked this one out and I feel a bit sheepish!
DGIUKAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

vikasjusCommented:
With the default settings Vista won't authenticate to a NT domain. You have to lower the authentication level Vista uses. "Run as administrator" secpol.msc Under Local Policies > Security Options Change the value of "Network Security: LAN Manager authentication level" from "NTVLM2 responses only" to "LM and NTLM - use NTLMv2 session security if negotiated"
if this dont work then you need to upgrade your domain to win2k or win2k3
0
WeanCommented:
The Security downgrade looks fine to me. is this VISTA RTM?

Has the Vista Machine got IPv6 Enabled? if so try disable it and then try again.

Also try using the wizard, Right click on My Computer > Properties >
Computer Name > Network ID.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
DGIUKAuthor Commented:
I think using the wizard did it. I had already disabled IPv6 cannot be sure if it was this or using the wizard instead of clicking "Change" and doing it manually.
Either way I now have a Vista PC on our domain. Although thats probably not a good thing!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows OS

From novice to tech pro — start learning today.