Internet Explorer Admin Kit version of IE 5.0 replaces the 128 bit encryption on Windows 2000.

A. If you install a version of IE 5.0 on Windows 2000 created by the Internet Explorer Admin Kit with the 128 bit encryption (IE5DOM.EXE) you may receive the following error:

System cannot log you on because domain <Computer name> is not available.

This is caused by the Rsaenh.dll and Schannel.dll files in Windows 2000 being replaced by the earlier IE 5 versions (but only rsaenh.dll matters).

Basically you should not install IE 5.0 on Windows 2000, it already has 5.01 as part of the core product.

If you do want to distribute a newer version of IE in the future ensure you have the new encryption pack and create a separate build of Internet Explorer that includes the latest 128-bit encryption update for Windows 2000 (Encpack.exe). If this is not available do not include the /n:v switch if you use the Ie5dom.exe component to create a separate build of Internet Explorer for Windows 2000.

To resolve the issue download Encpack.exe and run (or run from the supplied floppy disk if in America).

If the machine cannot be logged in to then you need to use the recovery console to replace rsaenh.dll with the high encryption pack version (or use an alternate NT installation):

1. Start Recovery Console.
2. Change to the system32 directory
   cd system32
3. Check the rsaeng.dll file
   dir rsaenh.dll
4. Rename the existing rsaeng.dll file
   ren rsaenh.dll rsaenh.old
5. Insert the floppy disk that contains the high encryption pack files into the floppy drive.
6. Copy the file rsaengs.dll to rsaeng.dll
   copy a:\rsaenhs.dll rsaenh.dll
7. Type exit, and then press ENTER to restart the computer normally. Remove the floppy disk from the floppy drive.