You are a network administrator for your company. All domain controllers run Windows Server 2003. The network contains 50 Windows 98 client computers, 300 Windows 2000 Professional computers, and 150 Windows XP Professional computers.

According to the network design specification, the Kerberos version 5 authentication protocol must be used for all client computers on the internal network.

You need to ensure that Kerberos version 5 authentication is used for all client computers on the internal network.

What should you do?

A.
Upgrade all Windows 98 computers to Windows NT Workstation 4.0.

B.
Install the Active Directory Client Extensions software on the Windows 98 computers.

C.
On each domain controller, disable Server Message Block (SMB) signing and encryption of the secure channel traffic.

D.
Replace all Windows 98 computers with new Windows XP Professional computers.

Explanation:
By default, in a Windows 2003 domain, Windows 2000 and Windows XP clients use Kerberos as their authentication protocol. Windows 98 doesn’t support Kerberos authentication. Therefore, we need upgrade the Windows 98 computers.

Reference:

J. C. Mackin, Ian McLean, MCSA/MCSE self-paced training kit (exam 70-291): Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure, Microsoft Press, Redmond, Washington, 2004, p. 11: 39-42