Changes

Jump to navigation Jump to search
m
Line 5: Line 5:     
==Background==
 
==Background==
Windows 10 was released in July 2015. Due to changes in the way that trust relationships are established with domain controllers, some modifications to the windows registry need to take place.
+
Windows 10 was released in July 2015.  
 +
 
 +
{{Warning box|Due to changes in the way that trust relationships are established with domain controllers, some modifications to the windows registry need to take place}}
    
(Note: Windows 11 is due soon. This will be revised in the light of experience for Windows 11).
 
(Note: Windows 11 is due soon. This will be revised in the light of experience for Windows 11).
Line 85: Line 87:     
and reset file to dos format
 
and reset file to dos format
  unix2dos /home/e-smith/files/samba/netlogon/netlogon.bat
+
  unix2dos /home/e-smith/files/samba/netlogon/netlogon.bat<br />
 
+
===Outlook 2016 on Win10===
 +
reference: [[Bugzilla:10106]] and SME10 [[Bugzilla:10169]]
   −
===Outlook 2016 on Win10===
+
A registry modification has been added to the default win10samba.reg. While setting up an email account on a Windows 10 computer joined to a domain (with roaming profiles) you would get an error code: 0x8004011c without this modification.
For both  SME9 [Note: SME9 is obsolete as of 30 November 2020] [[Bugzilla:10106]] and SME10 [[Bugzilla:10169]] a registry modification has been added to the default win10samba.reg. While setting up an email account on a windows 10 computer joined to a domain
  −
(with roaming profiles) you would get an error code: 0x8004011c without this.
      
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Protect\Providers\df9d8cd0-1501-11d1-8c7a-00c04fc297eb]
 
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Protect\Providers\df9d8cd0-1501-11d1-8c7a-00c04fc297eb]
Line 117: Line 118:  
  reg delete HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManWorkstation\Parameters /v "DNSNameResolutionRequired" /f
 
  reg delete HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManWorkstation\Parameters /v "DNSNameResolutionRequired" /f
 
  reg delete HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManWorkstation\Parameters /v "DomainCompatibilityMode" /f
 
  reg delete HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManWorkstation\Parameters /v "DomainCompatibilityMode" /f
 +
reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ProfSvc\Parameters /v "UseProfilePathExtensionVersion" /f
 +
 
  reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths /v "\\\\*\\netlogon" /f
 
  reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths /v "\\\\*\\netlogon" /f
reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ProfSvc\Parameters /v "UseProfilePathExtensionVersion" /f
+
 
 
  reg delete  HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System /v "SlowLinkDetectEnabled" /f
 
  reg delete  HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System /v "SlowLinkDetectEnabled" /f
 
  reg delete  HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System /v  "DeleteRoamingCache" /f
 
  reg delete  HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System /v  "DeleteRoamingCache" /f
Line 127: Line 130:  
See [[Bugzilla:9205]] and forum post https://forums.contribs.org/index.php/topic,53813.0.html
 
See [[Bugzilla:9205]] and forum post https://forums.contribs.org/index.php/topic,53813.0.html
   −
Re issues when ESET products are installed on Windows 10
+
Re issues when ESET products are installed on Windows 10.
 
+
 
  [[Category:Howto]]  
+
==Windows 10 and Windows 11 issues joining domains==
 
+
Following reports of issues here:
  [[Category:Administration]]
+
https://forums.koozali.org/index.php/topic,54919.0.html
 +
 
 +
See here:
 +
https://support.microsoft.com/en-us/topic/kb5020276-netjoin-domain-join-hardening-changes-2b65a0f3-1f4c-42ef-ac0f-1caaf421baf8
 +
 
 +
Possible reg fix:
 +
 
 +
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
 +
"NetJoinLegacyAccountReuse"=dword:00000001
 +
 
 +
Please check the bugs for any potential issues.
 +
 
 +
[[Category:Howto]]
 +
[[Category:Administration]]
147

edits

Navigation menu