samba - Jan 2014 - restrict shares to joined computers

Samba 4.1.4 AD/DC (git) on Ubuntu 12.04.4 LTS X64

Hi all,

It seems that client's authentication on shared folders is only done via 
login/password in AD.
This means that a user coming in office with his personal laptop can 
connect to the shared folders he has rights to, using his AD 
credentials, even if his laptop is not joined to the domain.

Is there a way to restrict shares to only joined computers ?

Unfortunately, I have no experience with real Windows server, so I don't 
know if it's the case with them.

Thanks in advance for your time.

Nicolas

On Wed, 2014-01-29 at 06:46 +1100, me at electronico.nc
wrote:
> Samba 4.1.4 AD/DC (git) on Ubuntu 12.04.4 LTS X64
> 
> Hi all,
> 
> It seems that client's authentication on shared folders is only done
via
> login/password in AD.
> This means that a user coming in office with his personal laptop can 
> connect to the shared folders he has rights to, using his AD 
> credentials, even if his laptop is not joined to the domain.
> 
> Is there a way to restrict shares to only joined computers ?
> 
> Unfortunately, I have no experience with real Windows server, so I
don't
> know if it's the case with them.
> 
> Thanks in advance for your time.
> 
> Nicolas
Hi
Not sure. We'd actualy like that to be the case. Maybe we have something
wrong. We can't authenticate on anything that isn't joined to the
domain.
Cheers,
Steve