Koozali.org: home of the SME Server

what is this dummy doing wrong

James Douglas

what is this dummy doing wrong
« on: October 16, 2002, 04:27:49 AM »
ok SME 5.5 update 2 all seems ok. BUT I cant join the domain with my xp pro machine. tried a user and admin accounts when prompted but no go.Client setting with encryption ??

Also, anyone using roaming profiles with XP pro clients and is it working ok for you?

Imsure Ive missed a post here on the solution, can someone point me there??

James Douglas

Re: what is this dummy doing wrong
« Reply #1 on: October 16, 2002, 07:28:24 AM »
found the xp reghack in the forum, hope that was it!

James Douglas

Re: what is this dummy doing wrong
« Reply #2 on: October 16, 2002, 07:48:38 AM »
ok so the reghack didnt work for me...I get access denied when trying to join the domain

Jason Evans

Re: what is this dummy doing wrong
« Reply #3 on: October 16, 2002, 08:22:26 AM »
James, I don’t think your doing anything wrong. Its Micr$s$ft thats done it different in XP.

First off the XP reg hack is used to put Windows X Pro into a compatibility mode in some sense. Windows XP Pro is designed to be able to logon to only Windows 2000 and above domains. When the reg hack is done it allows XP Pro to logon to Window NT 4.0 domains. Since SAMBA emulates an NT 4.0 PDC you can see where the problem is.

RequireSignOrSeal Registry hack
 
 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netlogon\parameters
"RequireSignOrSeal"=dword:00000000


However this is not your problem at this point….. You should be able to join the Samba domain without making any changes to the registry. Its when you reboot the problems starts. The registry needs altering at this point or you will receive a trust account failure when attempting to logon.

As long as your able to join other machines to the domain, having Samba properly configured.  Here’s what you should look for in Windows XP Pro.

-You need to make sure file and print sharing is checked off and that you are in fact sharing. Check the sharing on the hard drives and they should have admin shares C$ etc.
If not enable file sharing.

Where I think your problem stems from though is SFS. I have seen access denied errors when it is enabled. Here’s an explanation write from a book.

-Simple File Sharing (SFS), which allows less technically inclined users to share files with less risk. Directories like Windows, Program Files, and the Administrative shares are inaccessible when SFS is active. SFS also prevents granular security administration, so a share is either used by everyone or no one.

To shut down SFS, I select Start | Control Panel | Switch To Classic View | Folder Options | View, uncheck the Use Simple File Sharing option at the bottom of the list, and click Apply.

Now you should be able to join the domain… let me

Jason

brad wright

Re: what is this dummy doing wrong
« Reply #4 on: October 17, 2002, 09:05:33 AM »
James,
Have you got any anti-virus progs on your XP machine?? I had a week of headaches just tryong to get the XP box to 'connect' to the ibays. I could ping the server etc no problems.. but could not connect to any ibay.

Turned 'network protection' off (PC-Cillan) and 'hey presto!!" All sorted!

:)

hope this helps.

k_graham

Re: what is this dummy doing wrong
« Reply #5 on: October 17, 2002, 09:50:32 AM »
Have you by chance connected in workgroup mode and set up some connections.

I did this with Windows 2000 and the solution was to delete all connections including email connections.

If so save your email to a file before deleting the connection or you may loose your email.

Once all connections were deleted in workgroup then I was able to join the domain.

Ken

James Douglas

Re: what is this dummy doing wrong
« Reply #6 on: October 18, 2002, 07:32:41 PM »
i dont have any active connections when trying to connect but i have connected from that macine. i will try from another xp box that i have never attached to the esmith and see what happens.

im baffled at this point.