How To:
Install the Active Directory Client Extension (DSClient) For Windows 9x

Introduction

In order for a Windows 9x machine (Windows 95, 98 & ME systems) to access the ITS Active Directory, it is necessary to install the Active Directory Client Extension software - known as DSClient - on the system, and make a couple of small registry changes. This webpage provides simple step-by-step instructions that detail how to install the client and make the necessary registry changes.

Prerequisites:

In order to install the client, the Windows 9x system must be running at least:
  • Internet Explorer 4.01 or later

However......

  • For Windows 98 & ME systems, ITS highly recommends upgrading to Internet Explorer 6, Service Pack 1.
    This can be downloaded from the Virginia Tech's software site. - search for "Internet Explorer 6 Service Pack 1 (Windows)".
    Alternatively, it can be downloaded directly from Microsoft's website.
  • For Windows 95 systems,  ITS highly recommends upgrading to Internet Explorer 5.5, Service Pack 2.
    Internet Explorer version 6 will not run on Windows 95, thus Internet Explorer 5.5 Service Pack 2 is our recommendation.

Step 1: Where can I get the DSClient?

The DSClient software can be downloaded by clicking here: Download Dsclient.exe. Select Open from the File Download screen. Alternatively, you can find it on a Windows 2000 server CD-Rom (under Client\Win9x\DSclient.exe).

Step-by-step installation guide:

  1. If you download the client by clicking here: Download Dsclient.exe, select Open from the File Download screen, the installation should begin automatically.  Otherwise, browse to the Dsclient.exe file and double-click it to start the installation process, as in Figure A.

    Figure A: Dsclient.exe file location
    Dsclient.exe file

  2. The setup wizard process will start with a welcome message. Click Next, as in Figure B.

    Figure B: Welcome to the Directory Service Client Setup Wizard
    Welcome to the Directory Service Client Setup Wizard

  3. Click Next to continue with the installation process, as in Figure C.

    Figure C: Ready to Install
    Ready to Install

  4. After the installation has finished, a System Settings Change window will pop-up.  Click Yes to restart the system, as in Figure D.

    Figure D: System Settings Change
    System Settings Change

Step 2: Enabling NTLMv2

You should now have restarted your system.  You will now need to make a few additions to the Registry, in order to enable NTLMv2 authentication. 

Warning: Before you attempt to make any changes to the registry, please back it up and make sure you know how to restore if there is a problem afterward.  See Microsoft's Knowledge Base article - 322754 - How to Backup, Edit, and Restore the Registry in Windows 95, Windows 98 and Windows ME.
 
The necessary Registry changes can be made in one of two ways, depending on your preference:
  • Automatically - Downloaded the registry update by clicking here: Download lmcomp.reg. Select Open from the File Download screen. If a window pops-up asking you if you want to install the changes to the Registry, click "Yes".  Continue to Step 9.

  • Manually - simply follow the step-by-step instructions below.
  1. Go to the Start button and select Run, as in Figure E below.

    Figure E: Start Button
    Start Button

  2. After you have selected run from the start menu, a Run window will pop up.  Enter "regedit" (without the quotes) and click the OK button to open the registry editor as in Figure F below.

    Figure F: Run Window
    Run Window

  3. Locate and double click the following key in the registry: HKEY_LOCAL_MACHINE, as in Figure G.

    Figure G:
    HKEY_LOCAL_MACHINE Key
    HKEY_LOCAL_MACHINE Key
     
  4. Scroll down to the System key from HKEY_LOCAL_MACHINE and double-click it to expand the System folder.  You should now see CurrentControlSet.  Double-click it, as in Figure H.

    Figure H: HKEY_LOCAL_MACHINE/System
    HKEY_LOCAL_MACHINE/System

     
  5. Scroll down to the Control key, as in Figure I. If it does not exist, create an Lsa registry key by clicking on the Edit menu, selecting New, and then selecting Key.  Enter "Lsa" (without the quotes) in the text box and hit enter.  You should now have an Lsa key, as in Figure J.

    Figure I: HKEY_LOCAL_MACHINE/System/Control
    HKEY_LOCAL_MACHINE/System/Control

    Figure J: HKEY_LOCAL_MACHINE/System/Control/Lsa
    HKEY_LOCAL_MACHINE/System/Control/Lsa
     
  6. Click on the Lsa key to select it.  Click on the Edit menu, select New, and select DWORD Value.  Enter "LMCompatibility" (without the quotes).  You Registry should look like Figure K when you are done creating the DWORD Value.

    Figure K: LMCompatibility DWORD
    LMCompatibility DWORD
     
  7. Doubleclick the LMCompatibility value on the right pane to open an Edit DWORD Value window.  Enter 3 in the Value data field, as in Figure L below.

    Figure L: DWORD Value
    DWORD Value
     
  8. On the Registry menu, select Exit to leave the Registry Editor, as in Figure M below. 

  9. Figure M: Registry Editor Window
    Registry Editor Window

  10. You have now finished making changes to the registry. Please restart your system.
Congratulations!  You have now installed the Active Directory Client Extension and successfully enabled NTLMv2 authentication for your Windows 95/98/ME system to communicate with the ITS Active Directory.

Sources: http://www.its.caltech.edu/its/facilities/labsclusters/nt/How-To/Install-DSClient/Win9x.shtml