samba - Feb 2014 - Software GPO deployment fail because of computer trust

Hello all,

I've come a cross some strange GPO software deployment issue and below are
some info.

I've 2 DC + 1 Domain member (net ads join)

AS per suggested, the 2 DC are only use for DC and GPO where the Domain
member is working as the files sharing server.

There are some strange issue happen where:
1. Win7 vm test maching can get the GPO software without problem
2. Win XP in LAN can also get the GPO software without problem
3. Win7 cannot get the GPO software Reason --> Source don't exists.
>From this post
http://www.winvistatips.com/cannot-use-gpo-deployment-cluster-volume-t774753.html
(the last reply)

It tell me that kerberos is required between server and client (I just know
it, I though it is only required between DC and DC member)

So I try something in this new win7...
Without login to the domain, just the local administrator...
And there are no log there.

pushd \\DCmember\share

Login Fail, Unknown username and password

But

pushd \\DC1\netlogon OR \\DC1\dfs

I'll be able to login without any problem...

So the Question is why fail on the DCmember
And how can we make it pass

According to GPO software deployment.
The PC have to get the files from the software deployment server before
login...

So in this case on \\DCmember\share it fail

Please advise...
This is my DC Member config files.




Thank You.

Dear All,

I can confirm the behavior.
Once I've move the files to sysvol (too lazy to create another share)

They will work.

Now the question is
What is the Domain Member lacking of to provide such a trust?

Any advise?

Thank You.


On Thu, Feb 13, 2014 at 1:47 AM, Chan Min Wai <dcmwai at gmail.com> wrote:
> Hello all,
>
> I've come a cross some strange GPO software deployment issue and below
are
> some info.
>
> I've 2 DC + 1 Domain member (net ads join)
>
> AS per suggested, the 2 DC are only use for DC and GPO where the Domain
> member is working as the files sharing server.
>
> There are some strange issue happen where:
> 1. Win7 vm test maching can get the GPO software without problem
> 2. Win XP in LAN can also get the GPO software without problem
> 3. Win7 cannot get the GPO software Reason --> Source don't exists.
>
> From this post
>
>
http://www.winvistatips.com/cannot-use-gpo-deployment-cluster-volume-t774753.html
> (the last reply)
>
> It tell me that kerberos is required between server and client (I just
> know it, I though it is only required between DC and DC member)
>
> So I try something in this new win7...
> Without login to the domain, just the local administrator...
> And there are no log there.
>
> pushd \\DCmember\share
>
> Login Fail, Unknown username and password
>
> But
>
> pushd \\DC1\netlogon OR \\DC1\dfs
>
> I'll be able to login without any problem...
>
> So the Question is why fail on the DCmember
> And how can we make it pass
>
> According to GPO software deployment.
> The PC have to get the files from the software deployment server before
> login...
>
> So in this case on \\DCmember\share it fail
>
> Please advise...
> This is my DC Member config files.
>
>
>
>
> Thank You.
>
>
>
>
>
>