A. If you install a version of IE 5.0 on Windows 2000 created by the
Internet Explorer Admin Kit with the 128 bit encryption (IE5DOM.EXE) you may
receive the following error:
System cannot log you on because domain <Computer
name> is not available.
This is caused by the Rsaenh.dll and Schannel.dll files in Windows 2000 being
replaced by the earlier IE 5 versions (but only rsaenh.dll matters).
Basically you should not install IE 5.0 on Windows 2000, it already has 5.01
as part of the core product.
If you do want to distribute a newer version of IE in the future ensure you
have the new encryption pack and create a separate build of Internet Explorer
that includes the latest 128-bit encryption update for Windows 2000 (Encpack.exe).
If this is not available do not include the /n:v switch if you use the
Ie5dom.exe component to create a separate build of Internet Explorer for Windows
2000.
To resolve the issue download Encpack.exe and run (or run from the supplied
floppy disk if in America).
If the machine cannot be logged in to then you need to use the recovery
console to replace rsaenh.dll with the high encryption pack version (or use an
alternate NT installation):
- Start Recovery Console.
- Change to the system32 directory
cd system32
- Check the rsaeng.dll file
dir rsaenh.dll
- Rename the existing rsaeng.dll file
ren rsaenh.dll rsaenh.old
- Insert the floppy disk that contains the high encryption pack files into
the floppy drive.
- Copy the file rsaengs.dll to rsaeng.dll
copy a:\rsaenhs.dll rsaenh.dll
- Type exit, and then press ENTER to restart the computer normally.
Remove the floppy disk from the floppy drive.