{"id":740,"date":"2017-04-26T14:19:56","date_gmt":"2017-04-26T11:19:56","guid":{"rendered":"https:\/\/helia.ee\/koolitus\/?page_id=740"},"modified":"2017-04-26T14:19:56","modified_gmt":"2017-04-26T11:19:56","slug":"centos-7-required-settings-for-samba-nt4-domains-win10","status":"publish","type":"page","link":"https:\/\/helia.ee\/koolitus\/?page_id=740","title":{"rendered":"Centos 7 &#8211; Required Settings for Samba NT4 Domains (WIN10)"},"content":{"rendered":"<h1><span id=\"General_Information\" class=\"mw-headline\">General Information<\/span><\/h1>\n<p>Microsoft discontinued the official support for NT4 domains in the Windows operating systems. However, with some modifications, you are still able to use later released Windows operating systems with a Samba NT4 domain. Anyway, consider migrating to a Samba Active Directory (AD) to avoid problems if a future update from Microsoft disables or removes the unsupported NT4 features. For details about migrating, see <a title=\"Migrating a Samba NT4 Domain to Samba AD (Classic Upgrade)\" href=\"https:\/\/wiki.samba.org\/index.php\/Migrating_a_Samba_NT4_Domain_to_Samba_AD_%28Classic_Upgrade%29\">Migrating a Samba NT4 Domain to Samba AD (Classic Upgrade)<\/a>.<\/p>\n<table class=\"plainlinks imbox imbox-important\">\n<tbody>\n<tr>\n<td class=\"mbox-image\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/wiki.samba.org\/images\/thumb\/b\/b4\/Ambox_important.svg\/40px-Ambox_important.svg.png\" srcset=\"\/images\/thumb\/b\/b4\/Ambox_important.svg\/60px-Ambox_important.svg.png 1.5x, \/images\/thumb\/b\/b4\/Ambox_important.svg\/80px-Ambox_important.svg.png 2x\" alt=\"\" width=\"40\" height=\"40\" \/><\/td>\n<td class=\"mbox-text\">If your operating system is not mentioned on this page, or you are running a Samba Active Directory (AD), the Samba team highly recommends <u>NOT<\/u> to set any registry modification.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h1><span id=\"Joining_Windows_7_and_Later_.2F_Windows_Server_2008_and_Later_to_a_Samba_NT4_Domain\" class=\"mw-headline\">Joining Windows 7 and Later \/ Windows Server 2008 and Later to a Samba NT4 Domain<\/span><\/h1>\n<p>During the join, the following error message is displayed:<\/p>\n<pre>The following error occurred attempting to join the domain \"SA\":\r\nThe specified domain either does not exist or could not be contacted.\r\n<\/pre>\n<p>To enable the client to join the Samba NT4 domain:<\/p>\n<ul>\n<li>Save the following content to a plain text file named <code>samba_7_2008_fix.reg<\/code> using a text editor such as &#8220;Notepad&#8221; or &#8220;Editor&#8221; (not Word\/Wordpad\/OpenOffice\/LibreOffice\/etc.):<\/li>\n<\/ul>\n<pre>Windows Registry Editor Version 5.00\r\n\r\n[HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\LanManWorkstation\\Parameters]\r\n\r\n\"DomainCompatibilityMode\"=dword:00000001\r\n\"DNSNameResolutionRequired\"=dword:00000000\r\n<\/pre>\n<ul>\n<li>Log in using the local <code>Administrator<\/code> account.<\/li>\n<\/ul>\n<ul>\n<li>Double-click the file to import it to the Windows registry.<\/li>\n<\/ul>\n<ul>\n<li>Reboot to take the changes effect.<\/li>\n<\/ul>\n<h1><span id=\"Windows_7_.2F_Windows_Server_2008_R2:_Changing_the_Primary_Domain_DNS_Name_of_This_computer_to_.22.22_Failed.\" class=\"mw-headline\">Windows 7 \/ Windows Server 2008 R2: Changing the Primary Domain DNS Name of This computer to &#8220;&#8221; Failed.<\/span><\/h1>\n<p>During joining the machine to the NT4 domain the following error message is displayed:<\/p>\n<pre>Changing the Primary Domain DNS name of this computer to \"\" failed. The name will remain \"...\".\r\nThe error was:\r\n\r\nThe specified domain either does not exist or could not be contacted\r\n<\/pre>\n<p>You can ignore this error message or install a Microsoft hotfix on the Windows machine. For details, see <a class=\"external text\" href=\"http:\/\/support.microsoft.com\/kb\/2171571\" rel=\"nofollow\">KB2171571<\/a>.<\/p>\n<h1><span id=\"Windows_8.1_.2F_Windows_Server_2012_R2:_Error_code_0x80090345_launching_Windows_Credential_Manager\" class=\"mw-headline\">Windows 8.1 \/ Windows Server 2012 R2: Error code 0x80090345 launching Windows Credential Manager<\/span><\/h1>\n<p>After installing the <a class=\"external text\" href=\"https:\/\/support.microsoft.com\/en-us\/kb\/3000850\" rel=\"nofollow\">November 2014 update rollup (KB3000850)<\/a> the following error is displayed:<\/p>\n<pre>Error code 0x80090345 launching Windows Credential Manager\r\n<\/pre>\n<p>To fix this problem:<\/p>\n<ul>\n<li>Save the following content to a plain text file named <code>samba_8_2012_fix.reg<\/code> using a text editor such as &#8220;Notepad&#8221; or &#8220;Editor&#8221; (not Word\/Wordpad\/OpenOffice\/LibreOffice\/etc.):<\/li>\n<\/ul>\n<pre>Windows Registry Editor Version 5.00\r\n\r\n[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography\\Protect\\Providers\\df9d8cd0-1501-11d1-8c7a-00c04fc297eb]\r\n\"ProtectionPolicy\"=dword:00000001\r\n<\/pre>\n<ul>\n<li>Log in using the local <code>Administrator<\/code> account.<\/li>\n<\/ul>\n<ul>\n<li>Double-click the file to import it to the Windows registry.<\/li>\n<\/ul>\n<ul>\n<li>Reboot to take the changes effect.<\/li>\n<\/ul>\n<h1><span id=\"Windows_10:_There_Are_Currently_No_Logon_Servers_Available_to_Service_the_Logon_Request\" class=\"mw-headline\">Windows 10: There Are Currently No Logon Servers Available to Service the Logon Request<\/span><\/h1>\n<p>After you successfully joined Windows 10 to your Samba NT4 domain, logging in failed and the following error is displayed:<\/p>\n<pre>There are currently no logon servers available to service the logon request.\r\n<\/pre>\n<p>To fix the problem:<\/p>\n<ul>\n<li>Set in your primary domain controllers (PDC) <code>smb.conf<\/code> file:<\/li>\n<\/ul>\n<pre>server max protocol = NT1\r\n<\/pre>\n<dl>\n<dd>\n<table class=\"plainlinks imbox imbox-note\">\n<tbody>\n<tr>\n<td class=\"mbox-image\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/wiki.samba.org\/images\/thumb\/1\/1d\/Information_icon4.svg\/40px-Information_icon4.svg.png\" srcset=\"\/images\/thumb\/1\/1d\/Information_icon4.svg\/60px-Information_icon4.svg.png 1.5x, \/images\/thumb\/1\/1d\/Information_icon4.svg\/80px-Information_icon4.svg.png 2x\" alt=\"\" width=\"40\" height=\"40\" \/><\/td>\n<td class=\"mbox-text\">This setting prevent all your clients to use a newer SMB protocol version than SMB1 when communicating with the PDC. Anyway, the Samba team recommends to use this workaround. Disabling newer SMB versions on the Windows 10 client instead prevent this machine communicating using newer SMB version with <u>all<\/u> Samba\/Windows hosts.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/dd>\n<\/dl>\n<ul>\n<li>Restart Samba.<\/li>\n<\/ul>\n<h1><span id=\"IMPORTANT:_Registry_Changes_That_You_Should_Never_Set.21\" class=\"mw-headline\">IMPORTANT: Registry Changes That You Should Never Set!<\/span><\/h1>\n<table class=\"plainlinks imbox imbox-warning\">\n<tbody>\n<tr>\n<td class=\"mbox-image\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/wiki.samba.org\/images\/thumb\/1\/15\/Ambox_warning_pn.svg\/40px-Ambox_warning_pn.svg.png\" srcset=\"\/images\/thumb\/1\/15\/Ambox_warning_pn.svg\/60px-Ambox_warning_pn.svg.png 1.5x, \/images\/thumb\/1\/15\/Ambox_warning_pn.svg\/80px-Ambox_warning_pn.svg.png 2x\" alt=\"\" width=\"40\" height=\"35\" \/><\/td>\n<td class=\"mbox-text\">You must not to change the values of the <code>RequireSignOrSeal<\/code> or <code>RequireStrongKey<\/code>. Changing the settings breaks the interoperability with Windows and Samba installations.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>If you changed these parameters, reset the values of both keys back to <code>1<\/code>:<\/p>\n<ul>\n<li>Save the following content to a plain text file named <code>reset_RequireSignOrSeal_RequireStrongKey.reg<\/code> using a text editor such as &#8220;Notepad&#8221; or &#8220;Editor&#8221; (not Word\/Wordpad\/OpenOffice\/LibreOffice\/etc.):<\/li>\n<\/ul>\n<pre>Windows Registry Editor Version 5.00\r\n\r\n[HKEY_LOCAL_MACHINE\\System\\CCS\\Services\\Netlogon\\Parameters]\r\n\r\n\"RequireSignOrSeal\"=dword:00000001\r\n\"RequireStrongKey\"=dword:00000001\r\n<\/pre>\n<ul>\n<li>Log in using the local &#8220;<code>Administrator<\/code> account.<\/li>\n<\/ul>\n<ul>\n<li>Double-click the file to import it to the Windows registry.<\/li>\n<\/ul>\n<ul>\n<li>Reboot to take the changes effect.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>General Information Microsoft discontinued the official support for NT4 domains in the Windows operating systems. However, with some modifications, you are still able to use later released Windows operating systems with a Samba NT4 domain. Anyway, consider migrating to a Samba Active Directory (AD) to avoid problems if a future update from Microsoft disables or [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":645,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"class_list":["post-740","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=\/wp\/v2\/pages\/740","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=740"}],"version-history":[{"count":1,"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=\/wp\/v2\/pages\/740\/revisions"}],"predecessor-version":[{"id":741,"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=\/wp\/v2\/pages\/740\/revisions\/741"}],"up":[{"embeddable":true,"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=\/wp\/v2\/pages\/645"}],"wp:attachment":[{"href":"https:\/\/helia.ee\/koolitus\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=740"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}