samba - Apr 2025 - Windows11 24H2 and Event 1097...

Hi,

One thing you can try on Windows 11 machines is to leave domain and 
rejoin. Note that in some cases some user account duplication can 
happen. Or at least has happened to me in 4.10 branch.

SH

On 17/04/2025 14.01, Marco Gaiarin via samba wrote:
>> In my Samba domain i've started to upgrade windows hosts to
Windows11 24H2.
>> System GPO stop to apply (User GPO apply flawlessy). Complain about
'machine
>> account'.
>> In Event viewer, i've catch event '1097', that led to me
to:
>>         
https://learn.microsoft.com/it-it/troubleshoot/windows-server/group-policy/applying-group-policy-troubleshooting-guidance#event-id-1097
>> but clock are in sync.
> Googling deeper lead me to:
>
> 
https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/target-account-name-incorrect-error-access-file-share
>
> so i've set SupportedEncryptionTypes key to '0x7FFFFFFF', but
nothing
> changed.
>
>
> Again, thanks.
>
-- 
Sami Hulkko
+358 45 8569 319
sahulkko at gmail.com
sahulkko at icloud.com

Mandi! Sami Hulkko via samba
  In chel di` si favelave...
> One thing you can try on Windows 11 machines is to leave domain and 
> rejoin. Note that in some cases some user account duplication can 
> happen. Or at least has happened to me in 4.10 branch.
Mmmhhhh... effectively i've 3 PCs on 24H2: two have system GPO that never
worked; one was at 22H2 and worked flawlessy, but when upgrade to 24H2 stop
working.

Seems to me some sort of 'protocol level' glitch, the link:
>> Googling deeper lead me to:
>>      
https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/target-account-name-incorrect-error-access-file-share
Seems to me pertinent, but probably:
>> so i've set SupportedEncryptionTypes key to '0x7FFFFFFF',
but nothing changed.
is a 'server part' registry keys, not a client part; so, how can i relax
kerberos compatibility on client part?


Thanks.

--