search for: 24h2

It's definately not that, i'm running local pki and CA is distributed to all station, new win 11 24h2 has the root CA is the proper store (one of the things I double checked), and samba ad dc servers use certificates issued by this CA. Do You have windows 11 24h2 in samba ad with no issues? Which samba version You're running? Regards, Kacper W dniu 13.02.2025 o?22:19, Luca Olivetti via s...

On 05.02.2025 10:49, Rowland Penny via samba wrote: > > If it is a Samba problem, I would have expected to have seen multiple > reports of it, but I haven't seen them. What I have seen (after doing > an internet search) is lots of reports of similar problems with Windows > 24H2 and the real fix appears to be, do not use 24H2. > I thought, that it might be something about my specific configuration/dc history (some kind of configuration issue). That is, why I started checking changes and then I discovered that schema update part. Whatever it is, it seems to affec...

El 13/2/25 a les 19:43, Kacper Wirski via samba ha escrit: > I just want to add, that this week I introduced first windows 11 24h2 to > AD - everything up to 23h2 is working fine - but windows 11 24h2 has > some strange kerberos-related issues. > > I added pc to domain successfully and can log in, but I can't access > sysvol and netlogon and gpupdate fails. Automatic DNS update from the > workstation...

I just want to add, that this week I introduced first windows 11 24h2 to AD - everything up to 23h2 is working fine - but windows 11 24h2 has some strange kerberos-related issues. I added pc to domain successfully and can log in, but I can't access sysvol and netlogon and gpupdate fails. Automatic DNS update from the workstation fails with insufficient right...

...t; After a bit more investigation, that might be the same 'fix' I > > pointed to earlier, but from a different direction. > > > > So I dug deeper and found this: > > > > https://answers.microsoft.com/en-us/windowsclient/forum/all/after-update-to-latest-win-11-24h2-rdp-kerberos/d0f95e77-eb25-4604-bfd7-526d14a585a1?page=3 > > > > Which appears to be a lot closer to what the problem the OP is > > getting. If it is, then it appears to be a Windows bug that they > > are not accepting. > > > > I'll check this also. Chang...

Hi it looks that latest windows 11 24H2 breaks Samba NT4 domain join even with registry changed as described in https://wiki.samba.org/index.php/Required_Settings_for_Samba_NT4_Domains windows does not resolve domain name and nltest /dsgetdc also fails with Status = 1355 0x54b ERROR_NO_SUCH_DOMAIN already joined computers can stil...

...via samba wrote: > > After a bit more investigation, that might be the same 'fix' I pointed > to earlier, but from a different direction. > > So I dug deeper and found this: > > https://answers.microsoft.com/en-us/windowsclient/forum/all/after-update-to-latest-win-11-24h2-rdp-kerberos/d0f95e77-eb25-4604-bfd7-526d14a585a1?page=3 > > Which appears to be a lot closer to what the problem the OP is getting. > If it is, then it appears to be a Windows bug that they are not > accepting. > I'll check this also. Changing allowed kerberos algorihms had...

...> > that may point a way to the problem, using a fqdn will probably use > kerberos and using the IP will probably use rpc. If that is the case, > then there is probably a kerberos problem and doing a search on that, > turned up this; > > https://nuangel.net/2025/01/windows-11-24h2-insufficient-system-resources-trying-to-login/ > > Check that, it may be your problem. > > Rowland > > > After a bit more investigation, that might be the same 'fix' I pointed to earlier, but from a different direction. So I dug deeper and found this: https://an...

I'ma having a strange issue with Samba 4.21.3 (from debian bookworm backports) and Windows 11 24H2 Pro, where domain user can no longer log in. Error is "The username or password is incorrect". Used to work with 4.17.12 from bookworm, but I upgraded, because ever since 24H2 upgrade there were issues with passwordless authentication between domain computers, when using RDP since...

...er ip_of_dc > succeeds... > that may point a way to the problem, using a fqdn will probably use kerberos and using the IP will probably use rpc. If that is the case, then there is probably a kerberos problem and doing a search on that, turned up this; https://nuangel.net/2025/01/windows-11-24h2-insufficient-system-resources-trying-to-login/ Check that, it may be your problem. Rowland

...ealm in uppercase), not > "samba_WORKGROUP\username" format, that I actually supplied (realm is, > how it is called in smb.conf - ad.company_name.blaah while workgoup is > COMPANY_NAME). > > > Hi Virgo, I assume you use freerdp ver. 3 for connecting to the Windows 11 24H2 desktop remotely. It is very particular about how you enter domain and user name. There seems to be only two accepted ways Either /d:<domain.name.net> /u:<user name> or /u:'<NETBIOS DOMAIN NAME>\<user name>' You also need the switch /sec:nla freerdp3 pretends t...

El 13/2/25 a les 22:53, Kacper Wirski via samba ha escrit: > It's definately not that, i'm running local pki and CA is distributed to > all station, new win 11 24h2 has the root CA is the proper store (one of > the things I double checked), and samba ad dc servers use certificates > issued by this CA. > > Do You have windows 11 24h2 in samba ad with no issues? Which samba > version You're running? We had the same issues you reported (no...

I have been busy with other things lately and have not been able to investigate issue more. But there were some issues before it got really bad. But strange thing is, that clean install of 22H2 had same issue after successfully joining domain. And issue remained after upgrading to 23H2. And 22H2 did not even have latest security updates available. For me strangest part is, that after using

In my Samba domain i've started to upgrade windows hosts to Windows11 24H2. System GPO stop to apply (User GPO apply flawlessy). Complain about 'machine account'. In Event viewer, i've catch event '1097', that led to me to: https://learn.microsoft.com/it-it/troubleshoot/windows-server/group-policy/applying-group-policy-troubleshooting-guidance#eve...

> In my Samba domain i've started to upgrade windows hosts to Windows11 24H2. > System GPO stop to apply (User GPO apply flawlessy). Complain about 'machine > account'. > In Event viewer, i've catch event '1097', that led to me to: > https://learn.microsoft.com/it-it/troubleshoot/windows-server/group-policy/applying-group-policy-trou...

...Have the passwords perhaps not been changed for a long time? Unfortunately, I have not yet solved the problem. Best regards Georg Am 22.01.2025 um 06:16 schrieb Virgo P?rna via samba: > ????I'ma having a strange issue with Samba 4.21.3 (from debian > bookworm backports) and Windows 11 24H2 Pro, where domain user can no > longer log in. > > ????Error is "The username or password is incorrect". Used to work > with 4.17.12 from bookworm, but I upgraded, because ever since 24H2 > upgrade there were issues with passwordless authentication between > domain c...

...well and report back? On Sat, Dec 14, 2024, 2:52?AM Rowland Penny via samba <samba at lists.samba.org> wrote: > On Fri, 13 Dec 2024 07:34:47 +0100 > Georg Weickelt via samba <samba at lists.samba.org> wrote: > > > Hello, > > > > After updating to Windows 24H2, I get an error message when > > connecting to remotedesktop: "Authentication error. > > The requested encryption type is not supported by the Kerberos domain > > controller." > > 24H2 no longer has RC4, it only has AES, so could the KDC still be > using only RC...

...ere do not seem to be any additional patches by Samba to it either. > Have you tried adding '-d10' to the 'samba-tool domain join' command to > see if any further error messages are printed ? > Joining to domain is not and issue. At least I was able to join Windows 11 24H2 test-vm and 22H2 test-vm to domain. But I cannot log in with domain account to either of those... So the actual problem is not tied to Windows 11 24H2. Something about my DC must be wrong. I did do one thing in wrong order. I used samba-tool domain level to raise domain level before schema upgra...

...11 PC. I'll try clearing TMP on next office day (currently working remotely). Credential guard is not available, because it is not Windows 11 Enterprise (it is Pro). And re-enabling Core Protection did change anything (had this disabled, because Smart Card reader drived does not work with 24H2 otherwise). And just changing algorithms allowed for Kerberos had no effect. Strange thing was, that when I tested it Windows 11 22H2 test machine (that I today upgraded to 23H2) and enabled debug log on Windows NETLOGON service, then in that log it complained: 01/30 15:28:23 [ERROR] [1320] N...

And there has been some developement... test-computersecurechannel still reports True. But now test-computersecurechannel -repair now fails with "Test-ComputerSecureChannel: Cannot reset the secure channel password for the computer account in the domain. Operation failed with the following exception: The user name or password is incorrect." test-computersecurechannel -repair