[Samba] Samba Active Directory Domain Controller

[Anantha Raghava]

Hello,

I have implemented Samba as Active Directory Domain Controller with 
Version 4.6.3 on CentOS 7.3, el-514. We have 4 domain controllers named 
as DC1, DC2, DC3 and DC4. DC1 & 2 are in one location and DC3 & 4 are in 
a different location. DNS is SAMBA INTERNAL. All 4 servers are properly 
synchronizing and even GPO updates are working properly with rsync process.

However, off late we have been noticing that on some Windows XP with 
Service Pack 3 and Windows 7 with Service Pack 1, after joining domain, 
when user is logging in for the first time, as per policy, the DC will 
force the user to change their password. When user changes password, PC 
reports, cannot reach domain or your relationship with DC is not trusted 
and it happens randomly for some users.
We are unable to figure out what's happenning.

Can some one guide us in figuring out and fixing this issue?

Thanks in advance.
-- 

Thanks & Regards,


Anantha Raghava


DISCLAIMER:

This e-mail communication and any attachments may be privileged and 
confidential to eXza Technology Consulting & Services, and are intended 
only for the use of the recipients named above If you are not the 
addressee you may not copy, forward, disclose or use any part of it. If 
you have received this message in error, please delete it and all copies 
from your system and notify the sender immediately by return e-mail. 
Internet communications cannot be guaranteed to be timely, secure, error 
or virus-free. The sender does not accept liability for any errors or 
omissions.


Do not print this e-mail unless required. Save Paper & trees.