Topic: Dns domain change

[Stefano]

The second..

[smnirosh]

No. I cannot login using domain credentials

[Stefano]

Well, was the join successfull?

[smnirosh]

Yes. Joined. But login is not done

[Stefano]

Well, take a look at Windows event viewer

[smnirosh]

it has few events

 i will copy it

[smnirosh]

He failed to authenticate with \\ DESIGN, a Windows domain controller for the domain MACHINEDV, therefore it is possible that access requests are denied. The inability to authenticate may be due to the lack of recognition of another computer on the same network using the same name or the same password for this computer account. If this message appears again, contact your system administrator.

This is a NETLOGON event under Sysstem

[janet]

smnirosh

Back in post 3 of this thread you said:
"I changed the domain name of that client without removing from the previous domain. Now it says
"The trust relationship between this workstation and the primary domain failed""

So that is the source of your problem.
Why you did that I do not know, it was a mistake on your part.
You should ALWAYS unjoin workstations correctly so the machine account on the Domain Controller gets deleted.
Otherwise you are left with orphaned machine accounts that prevent you rejoining the client to the DOMAIN, exactly the problem you are having.

You cannot make or force that client station rejoin the same trusted DOMAIN using the same credentials, the credentials are no longer trusted.

Please see this thread re how to delete the machine account, which while old I think is still valid, ie the second part about deleting a machine account.
http://forums.contribs.org/index.php/topic,12790.msg48162.html#msg48162

Then also follow my earlier instructions (the 13th post in this thread) to rename the worgroup on your client, restart client, & then try to join the SME server DOMAIN again (after having deleted the machine account for that workstation).

In theory that combination should achieve success & worked for me in the past (have not needed to do it for many years now).

If you still have issues then maybe you need to look at Windows 7 tweaks &/or more carefully repeat the process.

[Stefano]

smnirosh, only this part:

--------------------------------------------------------------------------------
 
NOTE: %u when issued inside samba appends the $ to $machineName to create $machineName$. For instance if the computer netbios name is STATION1 then it becomes station1$. NOTE: uppercase netbios names are converted to lowercase.

To remove a machine from a domain once it is added you may follow these command-line steps:

/usr/bin/smbpasswd -x $machineName$
/usr/bin/passwd -d $machineName$
/usr/sbin/userdel $machineName$
/sbin/e-smith/db accounts delete $machineName$

As an example to remove a machine named STATION1 you would enter:

[root@e-smith /root]# /usr/bin/smbpasswd -x station1$
Deleted user station1$.

[root@e-smith /root]# /usr/bin/passwd -d station1$
Changing password for user station1$
Removing password for user station1$
passwd: Success

[root@e-smith /root]# /usr/sbin/userdel station1$

[root@e-smith /root]# /sbin/e-smith/db accounts delete station1$

On the samba side, after you perform the command lines above to remove the machineName, you need to restart samba before you try to rejoin the computer to the domain:

[root@e-smith /root]# /etc/rc.d/init.d/smb restart

On the Windows side, you need to switch to workgroup mode (use a non-existent workgroup name ex. "workgroup1") and reboot your computer. After successfully rebooting in workgroup mode, you then may attempt to rejoin the computer to the domain following the steps below:

[smnirosh]

Dear all,

I did the thing u recommended. Then rejoin the windows to sme server.
But windows pc didnt even accept the admin password of sme server
I then create an machine account using smbpasswd.
Then pc joined to domain
But login problem is still not solved.

[janet]

smnirosh

Have you added the registry tweaks to Windows 7 ?
Read this first
http://wiki.contribs.org/Windows_7_Support

[smnirosh]

Yes those are set long time ago.

[janet]

smnirosh

I then create an machine account using smbpasswd.
Then pc joined to domain
But login problem is still not solved.

You should not need to do that manually (create a machine account), so it seems to me you are working around the problem & not really resolving the real issue here.

I can only suggest to start again making sure you carefully follow all instructions.
Keep a record of exactly what you do & post the details here, with all messages.

[smnirosh]

Ok i will donit one time more as per your advice.

[smnirosh]

Before do it, my boss checked his mail. But he coudn't

We use webregister mail accounts for our office. The same domain name I assigned to the server.

Now all the mail accounts in outlook 2007 are not login. I doubt it is just because the same domain name with domain mail configuration.

No settings confirgured in MAIL section in server-manager web page of the sme server.

do we have any suggestions to resolve this mail problem.