[Samba] ComputerSecureChannel -Verbose False since windows 10/11 update 07/2023

[Matthias Kühne | Ellerhold Aktiengesellschaft]

Hello,

I've tried the fix in 
https://bugzilla.samba.org/show_bug.cgi?id=15418#c25 and it worked for 
us too.

After deploying a patched version of samba 4.18.4 to our DCs Ive tested 
2 win10 machins.

Machine 1: the "Test-ComputerSecureChannel" still showed false.

Calling the command with flag "-Repair" in an administrator-level 
powershell resulted in true and the test now shows true.

Re-enabled the NLA for RDP and it still works.

Machine 2: the "Test-ComputerSecureChannel" also still showed false. 
"-Repair" didnt work, because it couldnt find the computer account in 
the domain?! Using RSAT I could confirm that the user exists with a 
different name but the pre-2000 name was the correct one.

Deleted this user and recreated it in RSAT without a password.

After a lot of "Test-ComputerSecureChannel -Repair" and 
"Reset-ComputerMachinePassword" it finally worked and the secure channel 
is once again functional. Connecting to a SMB share via IP and a 
username without Domain-prefix worked.

Gonna rollout the patched versions to all DCs now and re-enable NLA and 
updates on all Win10 machines.

TLDR: +1 for me!

Thanks everybody, Matthias Kühne.

-- 
Senior Webentwickler
Datenschutzbeauftragter

Ellerhold Aktiengesellschaft
Friedrich-List-Str. 4
01445 Radebeul

Telefon: +49 (0) 351 83933-61
Web: www.ellerhold.de
Facebook: www.facebook.com/ellerhold.gruppe
Instagram: www.instagram.com/ellerhold.gruppe
Twitter: https://twitter.com/EllerholdGruppe

Amtsgericht Dresden / HRB 23769
Vorstand: Stephan Ellerhold, Maximilian Ellerhold
Vorsitzender des Aufsichtsrates: Frank Ellerhold



---Diese E-Mail und Ihre Anlagen enthalten vertrauliche Mitteilungen. Sollten Sie nicht der beabsichtigte Adressat sein, so bitten wir Sie um Mitteilung und um sofortiges löschen dieser E-Mail und der Anlagen.

Unsere Hinweise zum Datenschutz finden Sie hier: http://www.ellerhold.de/datenschutz/

This e-mail and its attachments are privileged and confidential. If you are not the intended recipient, please notify us and immediately delete this e-mail and its attachments.

You can find our privacy policy here: http://www.ellerhold.de/datenschutz/