samba - Jul 2023 - Samba 4.17.8+dfsg-2 (Debian 12) | Test-ComputerSecureChannel False | no RDP access after july update

Hello Samuel,

i have exactly the same problem. After the Windows Server 2022 VMs 
rebooted after Microsofts July Patches, both VMs have lost their 
domain-trust. I am using Ubuntu 22.04, so my Samba version is 
2:4.15.13+dfsg-0ubuntu1.1.

On those Machines, eventlog shows NETLOGON with the event-ID 3210, the 
"Test-ComputerSecureChannel" shows False and -Repair also does not
work.
Even removing and rejoining those servers from the AD will not fix this 
problem.

On one of the machines, i removed the updates and everything started to 
work again. Also, there are some Windows 11 clients in my AD that will 
not let me connect via RDP - and WinRM does not work, so i can't use 
ansible to remove those updates.

Maybe this is worth escalating?

Thank you for your work,
Michael

Hi,

Also seeing the problem with Win10 clients and samba 4.17.9 (on RHEL8.8).
RSAT, file shares work just fine and I never ran that PowerShell before 
but after reading your thread, I tried and noticed it reports the same 
output as what you have noticed.

Vincent

On Wed, 12 Jul 2023, Michael via samba wrote:
> Hello Samuel,
>
> i have exactly the same problem. After the Windows Server 2022 VMs rebooted
> after Microsofts July Patches, both VMs have lost their domain-trust. I am 
> using Ubuntu 22.04, so my Samba version is 2:4.15.13+dfsg-0ubuntu1.1.
>
> On those Machines, eventlog shows NETLOGON with the event-ID 3210, the 
> "Test-ComputerSecureChannel" shows False and -Repair also does
not work. Even
> removing and rejoining those servers from the AD will not fix this problem.
>
> On one of the machines, i removed the updates and everything started to
work
> again. Also, there are some Windows 11 clients in my AD that will not let
me
> connect via RDP - and WinRM does not work, so i can't use ansible to
remove
> those updates.
>
> Maybe this is worth escalating?
>
> Thank you for your work,
> Michael
>
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>
>

On 12/07/2023 12.37, Michael via samba wrote:
> Hello Samuel,
> 
> i have exactly the same problem. After the Windows Server 2022 VMs
> rebooted after Microsofts July Patches, both VMs have lost their
> domain-trust. I am using Ubuntu 22.04, so my Samba version is
> 2:4.15.13+dfsg-0ubuntu1.1.
> 
> On those Machines, eventlog shows NETLOGON with the event-ID 3210,
> the "Test-ComputerSecureChannel" shows False and -Repair also
does
> not work. Even removing and rejoining those servers from the AD will
> not fix this problem.
Micheal, I have a question for you. The issue is with LOCAL logon too, or only
with RDP logon?

Thanks

Fabio