[Samba] Windows 10 Domainlogon Samba 4.4.5 NT4-style domain

[basti via samba]

Hello,

I have try windows 10 in an Samba 4.4.5 NT4-style domain.
With some registry hacks (DomainCompatibilityMode and
DNSNameResolutionRequired) it can be an member of the domain.

When i try to login with domain member i get the error

"There are currently no logon servers available to service the logon
request"

At
https://wiki.samba.org/index.php/Required_settings_for_NT4-style_domains#Windows_10:_There_are_currently_no_logon_servers_available_to_service_the_logon_request.
say that setting

server max protocol = NT1

fix the problem, but when i set it windows 7 isn't able to connect to samba.

Then i found this mailinglist entry
https://lists.samba.org/archive/samba/2016-April/198763.html

and try

client ipc max protocol = SMB2
client ipc min protocol = SMB2
client max protocol = SMB2
client min protocol = CORE
server max protocol = SMB2
server min protocol = LANMAN1

i also test

SMB2_10
SMB3_10
SMB3_11

without success.

I use

samba 4.4.5

pdc in nt4-style with ldap backend

windows 7 upgraded to win 10 "works out of the box" but that can be that
it works because all "tested" userprofiles already exist on this machine


Is there a way to fix this?
Is it a problem of my "old" NT4-style domain?

thanks for any help.
Best regards,
basti


--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

[Luke Barone via samba]

I had this issue as well; unfortunately, the fix that isn't recommended by
the Samba team is to disable SMB 2/3 on Windows 10, which can break them
from connecting to other systems (and that's why it's not recommended). Any
reason you can't migrate soon to Samba4 AD?

On Thu, Aug 18, 2016 at 11:28 AM, basti via samba <sa...@lists.samba.org>
wrote:

[basti via samba]

There are only a small network with 10 win7 and 1 win10 at the moment. I
think the work of a migration is overkilled. At all this is only a test
PC so an generic user profile is the simpler solution in my opinion.

Thank you luke.

On 19.08.2016 03:38, Luke Barone via samba wrote:
> Any
> reason you can't migrate soon to Samba4 AD?

[L.P.H. van Belle via samba]

> 10 win7 and 1 win10

> I think the work of a migration is overkilled

I dont agree on that, yes setup takes time, but in the long end,
you will save time.

As of 3 pc's i setup and AD, why because it saves me time in maintaining.
Just keep is simple with minimal changes, so thats quickly setup.

Greetz,

Louis


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-...@lists.samba.org] Namens basti via samba
> Verzonden: vrijdag 19 augustus 2016 8:46
> Aan: sa...@lists.samba.org
> Onderwerp: Re: [Samba] Windows 10 Domainlogon Samba 4.4.5 NT4-style domain

[Rowland Penny via samba]

On Fri, 19 Aug 2016 08:45:51 +0200

basti via samba <sa...@lists.samba.org> wrote:

> There are only a small network with 10 win7 and 1 win10 at the
> moment. I think the work of a migration is overkilled. At all this is
> only a test PC so an generic user profile is the simpler solution in
> my opinion.
>

Yes, you are probably correct, it would be overkill to migrate, just
set up a new AD domain and move to that, after all you only have 11
computers.

Staying with an NT4-style domain isn't a good idea.

Rowland

[Klaus Hartnegg via samba]

Works here in Samba 4.4.4 with NT4-style domain, with only the two
registry changes (DomainCompatibilityMode and
DNSNameResolutionRequired), and server max protocol = NT1. Clients both
Win7 and 10.