After Samba server leaves domain, clients get: This account is not authorized to login from this station

Richard Sharpe realrichardsharpe at
Wed Jun 13 12:11:05 MDT 2012

On Tue, Jun 12, 2012 at 3:44 PM, Richard Sharpe
<realrichardsharpe at> wrote:
> Hi folks,
> I am seeing this problem. A Samba server was joined to a domain. Then
> we removed it and made sure to delete the DDNS entry.
> However, workstations that were using services on that node before the
> unjoin now get "This account is not authorized to login from this
> station" when trying to connect with \\short-name\share where
> short-name is the first comp of the hostname.
> It seems like there is some cache that the Windows client has that has
> to be cleared out.
> Does anyone know how to resolve this. (Using the IP address or the new
> FQDN works, not the short form.)

It seems that I misstated the problem.

What people were doing was re-installing (via kickstart) the server
from scratch. However, the client still thought that that box was
joined to the domain.

Removing the machine from the domain and cleaning up ticket caches was
required. klist.exe is your friend.

Richard Sharpe

More information about the samba-technical mailing list