[Samba] Machines joined to a domain can't access shares on standalone Samba server

Rowland penny rpenny at samba.org
Sun Sep 29 20:10:53 UTC 2019

On 29/09/2019 20:54, Robert Marcano via samba wrote:
> Thanks for checking it,  I was wondering if with the new Samba, Windows
> used the wrong user, tried downgrading, for testing with:
>    server max protocol = NT1

My standalone server uses:

client min protocol = SMB2_02

server min protocol = SMB2_02

> without success either.
> Now that you tell me that it happens to you too from the Windows UI makes

No, it happens for me from the Unix GUI, I didn't start a Win10 VM to 
test, but I have no reason to believe it would work any differently.

It works using smbclient with the right incantation, I feel it has 
something to do with ntlm auth, this is now turned off by default.


> me think is is not some kind of hardening feature on the Windows AD domain
> the server is installed. I tested with Windows 7 and Windows 10 on that
> domain.

More information about the samba mailing list