[Samba] Windows Remote Assistance fails

Ryan Bair ryandbair at gmail.com
Mon Jan 5 14:18:48 MST 2015

I attempted to set up unsolicited remote assistance via group policy, but
connections to the client machines fail.

A network trace show the 'expert' machine doing a TGS-REQ to the DC which
responds with a KRB5KDC_ERR_POLICY. This seems to be the origin of the

I noticed in the request, the username of the 'novice' is given as the
Server Name but is otherwise pretty unremarkable.

Has anyone successfully gotten this working on a Samba4 AD domain?

More information about the samba mailing list