User authentication is not performed after you turn on computer authentication in Windows XP (309448)

Important This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry

SYMPTOMS

On a networked computer that is running Microsoft Windows XP, after you turn on computer authentication, user authentication is not performed.

This problem may affect you if you try to configure Windows in a kiosk environment. You can turn on computer authentication to make sure that Group Policy settings are applied. However, if user authentication is not performed, you may not be able to manage network access from the computer based on user policy settings.

RESOLUTION

Service pack information

To resolve this problem, obtain the latest service pack for Windows XP. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

322389 How to obtain the latest Windows XP service pack

Hotfix information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

   Date         Time   Version      Size     File name
   ----------------------------------------------------
   05-Oct-2001  12:06  5.1.2600.15   53,760  Rastls.dll
   05-Oct-2001  12:05  5.1.2600.15  184,320  Wzcsvc.dll

MORE INFORMATION

Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

After you apply the service pack or the hotfix that is described in the "Resolution" section, you can modify the AuthMode registry entry to set the kind of authentication that occurs when a user logs on. Use one of the following values in the AuthMode registry entry:

Value	Kind of authentication
0	Use the default Windows XP authentication
1	Always perform user authentication when a user logs on
2	Perform computer authentication only

Follow these steps to set the value of the AuthMode registry entry:

Click Start, click Run, type regedit, and then click OK.
In Registry Editor, locate and then click the following registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EAPOL\Parameters\General\Global
In the right pane, double-click AuthMode, type the authentication mode in the Value data box, and then click OK.
Quit Registry Editor.
Restart the computer.