Koozali.org: home of the SME Server

Contribs.org Forums => General Discussion => Topic started by: Smitro on January 31, 2009, 12:23:56 AM

Title: Windows 7 and domain trust issues.
Post by: Smitro on January 31, 2009, 12:23:56 AM
Hi all,

I've just updated my workstation to Windows7 it now says that the trust relationship between the domain and computer have failed. So I tried to remove the workstation from the domain, and then re-add it again, but I can't get past the first step of removing it from the domain.

I go into the properties of the computer and then go to change the name and domain of the computer.. I then tell it that I want to change it to a workgroup machine. It asks for a password to be removed from the domain, I key in the password and then get the following...(http://clip2net.com/clip/m0/1233357124-clip-17kb.jpg)

I've worked out that no matter which username and password, be it the domain admin or the local admin I still get the same error. I have even tried pulling the network cable out and still get the same error. Can anyone offer any suggestions on how I can remove the machine from the domain?

Thanks in advance,
Title: Re: Windows 7 and domain trust issues.
Post by: CharlieBrady on January 31, 2009, 03:39:10 AM
I've just updated my workstation to Windows7 it now says that the trust relationship between the domain and computer have failed.

Don't report problems here - Please report bugs and potential bugs in the bug tracker
Title: Re: Windows 7 and domain trust issues.
Post by: erroneus on January 31, 2009, 04:10:45 AM
Now that your machine is loaded with an entirely different OS installation, your machine is not in fact a part of the domain.  Trying to unjoin from a domain it is not a member of is likely not to work.  You need to delete the machine account from your server first.  Then you can just join and you're done.
Title: Re: Windows 7 and domain trust issues.
Post by: Smitro on January 31, 2009, 05:49:25 AM
Thanks erroneus, but how do I tell my workstation that it's not part of a domain so I can rejoin?

CharlieBrady: I appriciate what you're saying, but I don't think this is an SME bug and anything that the SME team needs to be concerned with, but I knew that if anyone was in the know some one here would be. (hence I posted in "General")
Title: Re: Windows 7 and domain trust issues.
Post by: cactus on January 31, 2009, 08:39:23 AM
I appriciate what you're saying, but I don't think this is an SME bug and anything that the SME team needs to be concerned with, but I knew that if anyone was in the know some one here would be. (hence I posted in "General")
It might not be now as you are using a beta status OS AFAIK, but it certainly might be in the future when Windows 7 is matured and released. Please add it as a bug so the dev's are at least reminded to look after this in the future.
Title: Re: Windows 7 and domain trust issues.
Post by: Stefano on January 31, 2009, 08:46:23 AM
I've just updated my workstation to Windows7

so it's not a fresh installation but an upgrade? form what? XP? vista? a previous beta of windows7?

Ciao
Stefano
Title: Re: Windows 7 and domain trust issues.
Post by: Smitro on January 31, 2009, 08:48:14 AM
Upgrade from From Vista Business to Windows 7 Ultimate Beta Build 7000
Title: Re: Windows 7 and domain trust issues.
Post by: Stefano on January 31, 2009, 08:51:32 AM
Upgrade from From Vista Business to Windows 7 Ultimate Beta Build 7000

if so, I would check what kind of auth/trust is doing with gpedit..

btw, I guess it's only for test, not for produtcion purpose :-)

Stefano
Title: Re: Windows 7 and domain trust issues.
Post by: Smitro on January 31, 2009, 09:16:41 AM
Quote
I would check what kind of auth/trust is doing with gpedit.

Not sure what you mean? I know what the Group Policy Editor is, but I'm not sure what I'm looking for?
Title: Re: Windows 7 and domain trust issues.
Post by: erroneus on February 02, 2009, 04:14:26 PM
You upgraded your working workstation to a BETA test release OS?  Best advice: Back up any important data and reinstall from scratch.  If the data on the machine is not important and your important data is on the server (as it should be) then just reinstall from scratch and skip the back up step.  And if you want to be nice to Microsoft, report your findings to them... if they will listen at all.
Title: Re: Windows 7 and domain trust issues.
Post by: gzartman on February 03, 2009, 09:02:10 PM
Don't report problems here - Please report bugs and potential bugs in the bug tracker

Don't even report it to the SME bug tracker.  Windows 7 isn't even released yet.  MS is nortorious for changing things at the last minute with respect to Windows networking just to throw a kink in Samba compatability, or perhaps they threw in a kink now that won't be there in the final release.  Windows Vista, for example, underwent some very drasitic last minute changes even after Release Canidate went out for testing.

This isn't an issue with SME Server, because SME Server does not officially support Windows 7.

If you really feel you need to report a bug at this phase in the game, report it on Redhat's bug tracker. 
Title: Re: Windows 7 and domain trust issues.
Post by: gzartman on February 03, 2009, 09:10:22 PM
Thanks erroneus, but how do I tell my workstation that it's not part of a domain so I can rejoin?

CharlieBrady: I appriciate what you're saying, but I don't think this is an SME bug and anything that the SME team needs to be concerned with, but I knew that if anyone was in the know some one here would be. (hence I posted in "General")

The "people in the know" are located here:  http://us3.samba.org/samba/

Join the "samba" mailing list or search the archives here:  http://us3.samba.org/samba/archives.html  The development list is samba-technical.

There has no doubt been discussions going on with respect to Windows 7 for some time on both lists.  A quick glance at samba-technical list showed the following thread at the top of the archive (looks related to your issue):

http://lists.samba.org/archive/samba-technical/2009-February/063032.html

(I do see a developer from Microsoft communicating on this list, with respect to this thread -- very encouraging).

Title: Re: Windows 7 and domain trust issues.
Post by: cactus on February 03, 2009, 09:26:04 PM
(I do see a developer from Microsoft communicating on this list, with respect to this thread -- very encouraging).
OT: Impressive if that would be the case indeed, although I am not sure if he's on the list, he requested his message to be posted there AFAIK (http://lists.samba.org/archive/samba-technical/2009-January/062827.html) :-)
Title: Re: Windows 7 and domain trust issues.
Post by: FraunhoferIFF on October 07, 2009, 10:31:11 PM
Tip : http://forums.contribs.org/index.php/topic,44884.0.html
Title: Re: Windows 7 and domain trust issues.
Post by: Stefano on October 07, 2009, 10:41:19 PM
Tip : http://forums.contribs.org/index.php/topic,44884.0.html

interesting but could you please translate in english?

thank you
Title: Re: Windows 7 and domain trust issues.
Post by: erroneus on October 07, 2009, 10:43:08 PM
Tip : http://forums.contribs.org/index.php/topic,44884.0.html

I've looked over the list of instructions.  Though it's all in German, the instructions to follow seem clear enough.  Is it known whether or not this upgrade causes any issues with the rest of SME Server's functionality?
Title: Re: Windows 7 and domain trust issues.
Post by: erroneus on October 07, 2009, 10:55:44 PM
interesting but could you please translate in english?

thank you

Here's what I was able to translate using online resources:

Quote
Dear brethren,

In the coming days, Windows7 will be delivered to its customers.  During my job at the Fraunhofer Institute in Magdeburg, I was recently're trying out the RTM.

What brought me to W7 with our SME7 test.

Initial tests, however, went less well, it was simply not possible to accede to the domain.

Today I found the right solution.

First, you need a little update for your Samba, unfortunately there is not yet an official for the SME. After a long search but I have found the perfect package.

login on the console:

mkdir samba3
cd samba3
wget ftp://ftp.sernet.de/pub/samba/experimental/centos/4/i386/libwbclient0-3.4.2-40.el4.i386.rpm
wget ftp://ftp.sernet.de/pub/samba/experimental/centos/4/i386/samba3-client-3.4.2-40.el4.i386.rpm
wget ftp://ftp.sernet.de/pub/samba/experimental/centos/4/i386/samba3-3.4.2-40.el4.i386.rpm

local yum install *. rpm

Now, unfortunately, must be the neustart: (ie

  signal-event post-upgrade; signal-event reboot

That's it for our SME.

In W7, we still need 2 small REG messages.

HKLM \ System \ CCS \ Services \ LanmanWorkstation \ Parameters
   DWORD DomainCompatibilityMode = 1
   DWORD DNSNameResolutionRequired = 0

of these changes and a reboot, you can join your domain.

Another reboot and you W7 will work with our SME.

Attention:  All of this is seen experimentally and everyone makes their own risk.

But it works perfectly:)


 regards

 Marcel