[Samba] ComputerSecureChannel -Verbose False since windows 10/11 update 07/2023

[Fabio Muzzi]

On 12/07/2023 21.47, Jakob Curdes via samba wrote:

> Just to understand this, we also might be affected with several
> customers:
> 
> - after installing the July Windows update on W10 22H2 KB5028166, the
> following symptoms appear: 1) Test-ComputerSecureChannel -Verbose
> says "False" 2) RDPing into the system does not work 3) some reports
> about broken SMB connections?
> 
> I just tested this in our environment on an Ubuntu 18 server (I know,
> must be updated asap), there I see the Test-ComputerSecureChannel
> "False", while on a system without the update it says "true", but I
> cannot see any problems with RDP or SMB network connetions, so maybe
> there are more border conditions to this?
> 
> If I can help with further tests I am ready to go.


Hi Jacob, can you please tell me what version is your Samba DC? I suppose it's 4.7.6 if it's the original Ubuntu 18.04 version, am I right?

I'm trying to understand in how much manure I am drowning right now, I have about 10 small domains that use Samba (various versions) and I'm trying to understand what is expected to work and what is expected to fail.

Can your clients still connect to the domain? I mean, if the user logs on locally on the PC, not using RDP.

I know RDP is broken if using NLA.

Thanks.


-- 
Fabio Muzzi Frabetti