Internet Explorer Admin Kit version of IE 5.0 replaces the 128 bit encryption on Windows 2000.

John Savill

March 15, 2000

1 Min Read
ITPro Today logo in a gray background | ITPro Today

A. If you install a version of IE 5.0 on Windows 2000 created by theInternet Explorer Admin Kit with the 128 bit encryption (IE5DOM.EXE) you mayreceive the following error:

System cannot log you on because domain is not available.

This is caused by the Rsaenh.dll and Schannel.dll files in Windows 2000 beingreplaced by the earlier IE 5 versions (but only rsaenh.dll matters).

Basically you should not install IE 5.0 on Windows 2000, it already has 5.01as part of the core product.

If you do want to distribute a newer version of IE in the future ensure youhave the new encryption pack and create a separate build of Internet Explorerthat includes the latest 128-bit encryption update for Windows 2000 (Encpack.exe).If this is not available do not include the /n:v switch if you use theIe5dom.exe component to create a separate build of Internet Explorer for Windows2000.

To resolve the issue download Encpack.exe and run (or run from the suppliedfloppy disk if in America).

If the machine cannot be logged in to then you need to use the recoveryconsole to replace rsaenh.dll with the high encryption pack version (or use analternate NT installation):

  1. Start Recovery Console.

  2. Change to the system32 directory
    cd system32

  3. Check the rsaeng.dll file
    dir rsaenh.dll

  4. Rename the existing rsaeng.dll file
    ren rsaenh.dll rsaenh.old

  5. Insert the floppy disk that contains the high encryption pack files into the floppy drive.

  6. Copy the file rsaengs.dll to rsaeng.dll
    copy a:rsaenhs.dll rsaenh.dll

  7. Type exit, and then press ENTER to restart the computer normally. Remove the floppy disk from the floppy drive.

About the Author

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like