asked on

Connecting Windows 7 to Ubuntu / Samba as PDC

I have a network consisting of 12 Windows 7 Professional 64-bit machines and one 64-bit Ubuntu/Samba 3 server configured as a PDC using roaming profiles.

I can join the domain windows XP professional and login using any user from the domain, but when I try using Windows 7 professional 64-bit it will join the domain but after a reboot it says that the trust relationship between the workstation and the server failed and will not login with any user except the local account.

I tried changing the two registry entries listed at samba.org for windows 7, but I still get the same results. My samba version is 3.6.15

Anyone know the trick to making this work

ASKER CERTIFIED SOLUTION

lruiz52

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Rolling_Tech

ASKER

I followed the directions there and tried leaving and rejoining the domain, but I still get

"the trust relationship between the workstation and the primary domain controller failed"

lruiz52

Have you tried disabling the windows firewall to test?

Rolling_Tech

ASKER

I tried disabling the firewall on all connections then rebooted.

At login I got the same message:
"the trust relationship between the workstation and the primary domain controller failed"

lruiz52

check link below, try post #9.

https://bugs.launchpad.net/ubuntu/+source/samba/+bug/513562

Rolling_Tech

ASKER

Tried #9 same results can't login to any domain account.

Julian Parker

Are the machine accounts created ok?

Rolling_Tech

ASKER

When I join the domain it creates the machine accounts just fine, but for some reason it doesn't trust them.after a reboot.

Rolling_Tech

ASKER

I finally got past this problem using this registry script:

Windows Registry Editor Version 5.00

; Win7/Samba 3.4.x - Workstation Share
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\lanmanserver\parameters]
"AutoShareWks"=dword:00000001

; Win7/Samba 3.4.x - Compat
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\lanmanworkstation\parameters]
"DNSNameResolutionRequired"=dword:00000000
"DomainCompatibilityMode"=dword:00000001
; AllowPlain ....
; RequireSecuritySignature"=dword:00000000

; Win7/Samba 3.4.x - Compat
; http://us.generation-nt.com/answer/samba-rejecting-auth-request-client-xxx-machine-account-win7-help-206090182.html#206092242
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\netlogon\parameters]
"DisablePasswordChange"=dword:00000001
"RequireSignOrSeal"=dword:00000001
"RequireStrongKey"=dword:00000001

;Turn off last user logged in stuff.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system]
"dontdisplaylastusername"=dword:00000001

;Disable the security center stuff annoyances
; [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\wscsvc]
; "Start"=dword:00000003

; Speedup settings
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"SlowLinkDetectEnabled"=dword:00000000
"DeleteRoamingCache"=dword:00000001
"WaitForNetwork"=dword:00000000
"CompatibleRUPSecurity"=dword:00000001

; Can drive you nuts
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=dword:00000000
"LocalAccountTokenFilterPolicy"=dword:00000001

;Stupid keys that make the windows 7 sysprep crap out.
[HKEY_LOCAL_MACHINE\SYSTEM\Setup]
"RestartSetup"=dword:00000000
"SetupType"=dword:00000000
"SystemSetupInProgress"=dword:00000000
"SetupPhase"=dword:00000000
"CmdLine"=""
"OOBEInProgress"=dword:00000000

_________________________________________________________________________________________________

And then setting "RequireSignOrSeal"=dword:00000000

_________________________________________________________________________________________________
For some reason though it did not map my H:\ drive to home directory, although I can access all the shares without issue.