[Samba] loosing machine trust accounts

[Sapo]

> we are finding that probably 20% of windows 7 machines are loosing their
> trust relationship. Machines that have been freshly joined to the domain
> after a couple days display a message that the the security data base is 
no
> longer trusted.
> 
> Any idea what could be happening here?

Client computers are periodically  changing their domain passwords. I 
suppose the default is 30 days. I don't know if this still happens with 
Samba 4.

Put this on your Windows 7+ clients:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
"DisablePasswordChange"=dword:1