Koozali.org: home of the SME Server

Again domain join issue

Offline nicolatiana

  • *
  • 721
  • +0/-0
Again domain join issue
« on: November 17, 2022, 11:10:31 PM »

It seems that latest Windows 10 (maybe 11 too) 22H2 update introduces again some pc join to domain issue.
In some way the pc account is created in samba-SME but Win complains that an account with that name is still existing and join fails.
Here a detailed explanation:

https://borncity.com/win/2022/10/12/windows-oktober-2022-patchday-fix-fr-domain-join-hardening-cve-2022-38042-verhindert-ggf-domain-join/

The above link suggests to create an additional DWORD registry key in HKLM\System\CurrentControlSet\Control\Lsa named
NetJoinLegacyAccountReuse with value 1 (ox1).
I've tested with a few PC and works.
« Last Edit: November 17, 2022, 11:13:18 PM by nicolatiana »
Consulente di Smeserver.it -  Soluzioni e supporto su Sme server in Italia.

Offline Jean-Philippe Pialasse

  • *
  • 2,743
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: Again domain join issue
« Reply #1 on: November 18, 2022, 04:17:51 PM »
please bug it.

Offline ReetP

  • *
  • 3,722
  • +5/-0
Re: Again domain join issue
« Reply #2 on: November 18, 2022, 05:33:29 PM »
Just added this (Zsolt originally suggested this)

https://wiki.koozali.org/Windows_10_Support
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline Jean-Philippe Pialasse

  • *
  • 2,743
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: Again domain join issue
« Reply #3 on: November 19, 2022, 02:56:39 PM »
bug it so we add it to the regex patch

Offline bunkobugsy

  • *
  • 274
  • +4/-0
Re: Again domain join issue
« Reply #4 on: November 19, 2022, 07:11:59 PM »

Offline nicolatiana

  • *
  • 721
  • +0/-0
Consulente di Smeserver.it -  Soluzioni e supporto su Sme server in Italia.

Offline Jean-Philippe Pialasse

  • *
  • 2,743
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: Again domain join issue
« Reply #6 on: November 29, 2022, 10:35:26 PM »
new version building

/usr/bin/plague-client build e-smith-samba e-smith-samba-2_6_0-27_el7_sme sme10
Package e-smith-samba enqueued.  Job ID: 3995.

%changelog
* Tue Nov 29 2022 Jean-Philippe Pialasse <tests@pialasse.com> 2.6.0-27.sme
- Fix fail to join the domain [SME: 12231]
  patch from  bunkobugsy ; Fix from Nico Tiana