[Samba] Help with domain share 4.22.x

[Rowland Penny]

On Fri, 18 Sep 2026 14:08:13 -0300
Bruno Kammers Ribeiro via samba <samba at lists.samba.org> wrote:

> Is there any way to force samba fileserver always insert DOMAIN, for
> non-domain users can access only with user?
> 

If a user that is a member of the AD domain 'DOMAIN.LOCAL' connects
from a domain joined machine, the user is known and winbind removes the
NetBIOS domain name 'DOMAIN' from the username, provided that 'winbind
use default domain = yes' is set in the fileservers smb.conf file
(which it is in your case).

When a user from a non domain join joined machine tries to connect,
either no NetBIOS domain name or one different from 'DOMAIN' is sent,
so winbind cannot 'use' or remove the domain, the user is then unknown
and isn't allowed access.

If the Netbios domain name 'DOMAIN', along with a username, is sent,
then winbind 'uses' the NetBIOS domain name and removes it and if the
username matches a domain user and the correct password is also
supplied, the user is allowed access.

So, no, your users from a non domain computer cannot connect without
using the domain name in some form.

Rowland