search for: ms15

cf. https://support.microsoft.com/kb/3000483 Seeing how this seems to affect both client and server side, is it possible (and safe) to enable Mutual Authentication and Integrity as explained in the KB entry? -- Mit freundlichen Gr??en, / Best Regards, Sven Schwedas Systemadministrator TAO Beratungs- und Management GmbH | Lendplatz 45 | A - 8020 Graz Mail/XMPP: sven.schwedas at tao.at | +43

Greetings list, for weeks I still have problems with a security policy, now update my samba to version 4.2.3 and I have the same problem , it is related to a desktop background that want to come out on the PC.

Since past the beta-times of samba 4 (and it worked in former times!!) it never worked like this: \\yourdomain\share or \\yourdomain \dfs-share. The only thing working along witch your domain is: \\yourdomain\netlogon. I had another thread open on this case some times ago. Greetings Daniel EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen

...new share? I suspect something related to this, since you posted : > \\mydomain\sysvol does work, as well as \\mydomain\netlogon. > But, there is some issue with any \\mydomain\newshare. Good info here : https://blogs.technet.microsoft.com/askpfeplat/2015/02/22/guidance-on-deployment-of-ms15-011-and-ms15-014/ Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Jonathan Hunter via samba > Verzonden: vrijdag 21 april 2017 11:47 > Aan: mueller at tropenklinik.de > CC: samba; Jeremy Allison > Onderwe...

...g related to this, since you posted : > > \\mydomain\sysvol does work, as well as \\mydomain\netlogon. > > But, there is some issue with any \\mydomain\newshare. > > Good info here : > https://blogs.technet.microsoft.com/askpfeplat/2015/02/22/guid > ance-on-deployment-of-ms15-011-and-ms15-014/ > > > Greetz, > > Louis > > > > > -----Oorspronkelijk bericht----- > > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Jonathan > > Hunter via samba > > Verzonden: vrijdag 21 april 2017 11:47 > > Aan: muell...

Thanks for your response. OK I get the AD DC part about sysvol and the fact I'm running a pdc. Can I confirm what you mean as domain? so if i get: #hostname dev2.test should my smb.conf have workgroup = test it does not match at present. regards -- View this message in context:

...username>". Then each user is logged into a new account in windows 10, each says COMPO\<username> and magically their login scripts run! I also followed the windows 10 group policy for hardened unc: https://blogs.technet.microsoft.com/askpfeplat/2015/02/22/guidance-on-deployment-of-ms15-011-and-ms15-014/ and the windows 8 delayed boot group policy (with it set to disabled, default was unset): http://www.thewindowsclub.com/configure-logon-script-delay-windows Hope this helps someone Regards -- View this message in context: http://samba.2283325.n4.nabble.com/win-10-client-o...

Hai, Thanks for that link, that is very usefull. Only after reading it i see its missing a very important part. This opens a security leak. See link ( dated in : Last Updated: Apr 15, 2015 ) https://support.microsoft.com/en-us/help/3000483/ms15-011-vulnerability-in-group-policy-could-allow-remote-code-executi The examples shown there. \\<Server>\<Share> - Needs to be replaced with \\<Server>.<internal.dom.tld>\<Share> - As shown in Advanced configuration examples.. Now only somewhere in 2018 MS is pu...

...g as an AD DC, is sometimes operated in a domain with a mix of Samba and Windows Active Directory Domain Controllers. All versions of Samba from 4.0.0 to 4.3.2 inclusive, when deployed as an AD DC in the same domain with Windows DCs, could be used to override the protection against the MS15-096 / CVE-2015-2535 security issue in Windows. Prior to MS16-096 it was possible to bypass the quota of machine accounts a non-administrative user could create. Pure Samba domains are not impacted, as Samba does not implement the SeMachineAccountPrivilege functionality to allow non...

...g as an AD DC, is sometimes operated in a domain with a mix of Samba and Windows Active Directory Domain Controllers. All versions of Samba from 4.0.0 to 4.3.2 inclusive, when deployed as an AD DC in the same domain with Windows DCs, could be used to override the protection against the MS15-096 / CVE-2015-2535 security issue in Windows. Prior to MS16-096 it was possible to bypass the quota of machine accounts a non-administrative user could create. Pure Samba domains are not impacted, as Samba does not implement the SeMachineAccountPrivilege functionality to allow non...

[ Rowland, i know, i need to upgrade. ;-) ] Some month ago, with a relative big bunch of fix&tweaks, i was able to put a Win10 1903 client in join to a 'NT mode' Samba domain. Now i'm trying to do the same with a 1909 version; all seems to work as before, BUT netlogon script (defined in smb.conf with: logon script = startup.bat ) simply seems does not run. No log event in

...g as an AD DC, is sometimes operated in a domain with a mix of Samba and Windows Active Directory Domain Controllers. All versions of Samba from 4.0.0 to 4.3.2 inclusive, when deployed as an AD DC in the same domain with Windows DCs, could be used to override the protection against the MS15-096 / CVE-2015-2535 security issue in Windows. Prior to MS16-096 it was possible to bypass the quota of machine accounts a non-administrative user could create. Pure Samba domains are not impacted, as Samba does not implement the SeMachineAccountPrivilege functionality to allow non...

...g as an AD DC, is sometimes operated in a domain with a mix of Samba and Windows Active Directory Domain Controllers. All versions of Samba from 4.0.0 to 4.3.2 inclusive, when deployed as an AD DC in the same domain with Windows DCs, could be used to override the protection against the MS15-096 / CVE-2015-2535 security issue in Windows. Prior to MS16-096 it was possible to bypass the quota of machine accounts a non-administrative user could create. Pure Samba domains are not impacted, as Samba does not implement the SeMachineAccountPrivilege functionality to allow non...

----- Original Message ----- From: <samba-request@lists.samba.org> To: <samba@lists.samba.org> Sent: Thursday, March 06, 2003 8:01 PM Subject: samba Digest, Vol 3, Issue 10 > Send samba mailing list submissions to > samba@lists.samba.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.samba.org/mailman/listinfo/samba > or, via email,