Topic: SME 5.1.2 Problems with W2K Client and Domain

[Nathan]

Everyone must be fed up with this problem, but I've tried EVERYTHING before posting this.

My problem:
----------------------------------------------------------------------------------------------------------
"The account supplied is a computer account"
----------------------------------------------------------------------------------------------------------
I continue to get this error trying to connect a W2K laptop to the domain. I have read and tried many times the following:
---------------------------------------------------
This error may arise if the domain that you're trying to join has the same name as your workgroup.  Change the name of the workgroup on your Windows machine, reboot, and then try joining the domain.
---------------------------------------------------

Problem History
The machine in question is an ACER Notebook which was connected to the domain fine when running Win98 - I was required to upgrade to W2k for work.

note: I have 2 other desktops (w2k/xp) connected fine to the domain after following all the helpful posts/HOWTOs etc (w/ updated samba and root acc created)

While Running SME 5.0
1. I did an UPGRADE (not clean install) first to W2K - first time I received the error.
2. I changed the workgroup name (reboot)- same error.
3. I changed the computer name (reboot) - same error.
4. repeated step 2 with many variations
5. Tried to find the computer account on the server (account not found)
6. settled on one computer name "XYZ" and tried to connect - same error

Upgraded the server to v 5.1.2
7. Tried steps 2 and 3 again - same error
8. did a CLEAN install of W2k and computer name is set at install to "XYZ"
9. Tried to connect - same error
10. Tried again to find and delete the computer account on the server (account not found)
11. Renamed computer to "ABC" (never been on the domain before) and workgoup to "xyz1234" - same error.
12. Give up and post message.

Sorry for this long post but I thought the detail might help.
Anyone with any ideas, I would be infinitely grateful.

-Nathan

[Jon Blakely]

Have you checked the registry settings on the Acer:

"The account supplied is a computer account"
This error may arise if the domain that you're trying to join has the same name as your workgroup. Change the name of the workgroup on your Windows machine, reboot, and then try joining the domain.


you may also need to change Windows 2000/XP Registry Settings

It is suggested that you check the following registry entries which should be set to (0). This is the default under W2K (but check to confirm) however under XP the default is (1) and definitely needs changing:

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Netlogon\Parameters]
"requirestrongkey"=dword:00000000
"requiresignorseal"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Netlogon\Parameters]
"requirestrongkey"=dword:00000000
"requiresignorseal"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
"requirestrongkey"=dword:00000000
"requiresignorseal"=dword:00000000

[Grant Fribbens]

The problem is not with the Win2k machine it is a problem with the upgrade from SME 5.0 to SME 5.1.2 as Sambas smb.conf file has not been updated with the add computer to domain information. The best way to do this is change the SME server to a non domain controller and then back again and the settings will be corrected to add windows 2000 machine even SP2 ones

Regards

Grant Fribbens

[Nathan]

Jon,
Thanx for your suggestion, I checked the reg settings and all fine.

Grant,
I gave that a go, and I thought it was going to work, the wait, the wait... then no, the same error. You don't know what the configuration option in smb.conf  is exactly?

You wouldn't know if having upgraded Samba already to 2.2.? (W2K version) previously and added the root account if that would cause me problems with the SME 5.1.2 upgrade. I wish Windows would give more specific error messages and not these generic "Account used is a computer account" type messages for everything.

I'm going to have a play around with Samba and keep trying thanx

Nathan

[Nathan]

You Beauty!!!!!
Welcome to the Domain!!!!!

I twiggled with a couple of things in smb.conf specifically commented out the two bottom lines in smb.conf because they appeared to be doubled up to me (what do I know?) restarted samba tried again, remote procedure call error.
Then removed the comments again to normal and after about 10 minutes doing something else it worked. Strange, you get it to work, and you don't exactly know how. Who cares...
Thanx again

----------------------------------------
# [12adduers]
# Added for correct Windows domain user account set up
# Updated script used (dmc-machine-account-create)
add user script = /sbin/e-smith/db accounts set %u machine ; \
/etc/e-smith/events/actions/dmc-machine-account-create create-machine-account %u

#add user script = /sbin/e-smith/db accounts set %u machine ; \
#/etc/e-smith/events/actions/machine-account-create  create-machine-account %u
---------------------------------------