653
edits
Changes
Jump to navigation
Jump to search
mLine 2:
Line 2: + + − + + + + + + − + − + − + − + − + − + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + − [[Image:W8-domain-2.png]]+ − [[Image:W8-domain-3.png]]+ − [[Image:W8-domain-4.png]]+ + − [[Image:W8-domain-5.png]]+ − [[Image:W8-domain-6.png]]+ + + + + + − == Slow login with win8 to sme8 domain ==+ + − With certain networks you may have an issue with a slow login to the SME Server domain due to a timeout issue on the network. In this case you should apply the following commands to your SME Server as can be found at [[bugzilla:7332]]+ − The version of package needed e-smith-samba-2.2.0-54.el5.sme is in smeupdates-testing but will shortly be by default in smeupdates so in the first instance verify your package version − rpm -qa e-smith-samba + − e-smith-samba-2.2.0-54.el5.sme − You need at least this version as above, otherwise try this+ + + + + + + − yum update --enablerepo=smeupdates-testing e-smith-samba + − signal-event post-upgrade; signal-event reboot+ − Then you must add a new configuration setting to you smb internal database+ − config setprop smb WaitForNetwork disabled+ − signal-event console-save − + − [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManWorkstation\Parameters] − "DNSNameResolutionRequired"=dword:00000000 − "DomainCompatibilityMode"=dword:00000001 + + + + + + + + + − After this you follow the usual way to add a Win7 to the SME DOMAIN, as above [[Windows_8_Support#Join_a_SME_Server_8.0_Domain_with_Win8]]
→Background
== Background ==
== Background ==
Windows 8.1 reached the end of Mainstream Support on [https://docs.microsoft.com/en-gb/lifecycle/faq/windows#windows-81 January 9, 2018]; unless you purchase extended support, the only Microsoft-supported Windows version now is Windows 10. We strongly recommend you do not use versions of Windows unsupported by Microsoft.
Windows 8 was released in december 2012. Due to changes in the way that trust relationships are established with domain controllers, older versions of Samba (need at least 3.6.6) do not allow Windows 8 clients to log in once joined to a domain. see [[bugzilla:7172]]
Windows 8 was released in december 2012. Due to changes in the way that trust relationships are established with domain controllers, older versions of Samba (need at least 3.6.6) do not allow Windows 8 clients to log in once joined to a domain. see [[bugzilla:7172]]
== Join a SME Server 8.0 Domain with Win8 ==
== Join a SME Server 8.0 Domain with Win8 ==
Previously you needed to edit your Win8 registry to facilitate the joining of a SME Server Domain, however this can more easily be achieved by importing win8samba.reg fix by using either a usb key or by the network with http.
Previously you needed to edit your Win8 registry to facilitate the joining of a SME Server Domain, however this can more easily be achieved by importing win8samba.reg fix by using either a usb key or by the network with http.
{{Note box|msg=The win8samba.reg is not yet in the smeupdates repository, you can see the [[bugzilla:7172]] if you can not find it in you server-resources.}}
At least you need :
[root@sme8dev ~]# rpm -qa e-smith-samba
e-smith-samba-2.2.0-58.el5.sme
*Save the Win8 registry patch (win8samba.reg) from https://your-server-ip/server-resources/regedit/ with your favourite web browser
*Save the Win8 registry patch (win8samba.reg) from https://your-server-ip/server-resources/regedit/ with your favourite web browser.
*On your windows desktop, start "regedit" from the search menu in the top right corner and import the win8samba.reg
*On your windows desktop, start "regedit" from the search menu in the top right corner and import the win8samba.reg.
*Set your domain instead of your workgroup. Add the client machine to the domain as normal ()
*Set your domain instead of your workgroup. Add the client machine to the domain as normal.
*When asked on your Windows PC use the 'admin'(*) username and your SME Server admins password.
*When asked on your Windows PC use the 'admin'(*) username and your SME Server admins password.
*You should get back the response 'Connected to Domain'
*You should get back the response 'Connected to Domain'
*You have to reboot your computer to reach the Domain
*You have to reboot your computer to reach the Domain
{{Tip box|To connect a windows 8 client to your SME Server Domain, Go to the Top right corner, select "Parameters" and then "PC Informations", select the link "change Settings", then click on "Change" Tab.. Enter your servers "Domain" value in the domain field and 'Connect'. Enter the username of admin(*) with the servers admin password when asked, and You should get back the response 'Connected to Domain'. Reboot the computer to reach the Domain.}}
{{Tip box|To connect a windows 8 client to your SME Server Domain, Go to the Top right corner of your Desktop, select "settings" and then "PC Info", select the link "change Settings", then click on "Change" Tab.. Enter your servers "Domain" value in the domain field and 'Connect'. Enter the username of admin(*) with the servers admin password when asked, and You should get back the response 'Connected to Domain'. Reboot the computer to reach the Domain.}}
(*) Admin or any user in the 'Domain Admins' group can join the domain.
(*) Admin or any user in the 'Domain Admins' group can join the domain.
<gallery></gallery>
<gallery>
[[Image:W8-domain-1.png]]
Image:W8-domain-1.png
Image:W8-domain-2.png
Image:W8-domain-3.png
Image:W8-domain-4.png
Image:W8-domain-5.png
Image:W8-domain-6.png
</gallery>
{{Note box|You will receive one warning about DNS domain name configuration after the join has succeeded:
"Changing the Primary Domain DNS name of this computer to "" failed.
The name will remain "MYDOM". The error was:
The specified domain either does not exist or could not be contacted"
But this error can safely be ignored or, if you run Windows 7, silenced by a hotfix, that was published by [http://support.microsoft.com/kb/2171571 Microsoft: KB2171571: You incorrectly receive an error message when you join a computer that is running Windows 7 or Windows Server 2008 R2 to a Samba 3-based domain].}}
===Microsoft Account or Local account===
{{Note box|When you are using Windows 8 in a SME Server domain environment, you will not be able to use a Microsoft account to sign into a SME Server Domain. Indeed your Microsoft account is not recognized by the server after the login and you have to give your password for each network share you want to reach on the SME Server}}
There are two types of Windows 8 User accounts to choose from:
*Microsoft account
When you sign into Windows 8 with a Microsoft account:
# You must associate an email address with your Windows 8 User account.
# Microsoft apps automatically update online content.
# Your settings will be synced across other Windows 8 PCs you use.<br />
*Local account
When you sign into Windows 8 with a Local account:
# You are not required to associate an email address with your Windows 8 User account.
# You will have to create a new user account for each Windows 8 PC you use.
# Your settings won't be synced across the Windows 8 PCs you use.<br />
If you are not worried about being instantly and directly connected to the Cloud or the Windows Store and are not interested in having your settings synced between multiple Windows 8 systems, then you may want to sign in to Windows 8 using a Local account. This Local Account is mandatory if you want to use all the services that an SME Server Domain can give to you.<br />
Now, be aware that when you use a Local account, you will still be able to access everything in the Windows Store or SkyDrive, but accessing them will require that you first sign in with your Microsoft account credentials. For example, the first time that you attempt to access SkyDrive, you'll have to enter your Microsoft account credentials. After you do so for the first time, your credentials will be saved. Once your credentials are saved, you will be able to access the service just as if you were using a Microsoft account.
<gallery>
Image:W8-domain-1.png
Image:W8-domain-2.png
Image:Localaccount2.png
Image:Localaccount3.png
Image:Localaccount4.png
Image:Localaccount5.png
</gallery>
{{Tip box|To change a Microsoft Account to a Local Account, Go to the Top right corner of your Desktop, select "settings" and then "Change Pc settings", select the link "Switch to local account", give the user password and select "next". Enter your user values in the local account field and press "Next". The new local account will be added}}
==Setting up network drives==
In order to have logon script working you must add the following Keys in registry
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths]
"\\\\*\\netlogon"="RequireMutualAuthentication=0,RequireIntegrity=0,RequirePrivacy=0"
If you are using SME Server as a domain controller and the workstations have joined the domain
you can automate drive mapping and syncronise the PC time with the netlogon.bat file
Note: [[:SME_Server:Documentation:Administration_Manual:Chapter13#Workgroup |Chapter 13]] has a method for admin to edit the netlogon.bat file without using the command line. You can consider also the [[SME_Server:Documentation:Administration_Manual:Chapter7|chapter 7]] on Configuring the Computers on Your Network
nano -w /home/e-smith/files/samba/netlogon/netlogon.bat
REM To set the time when clients logon to the domain:
net time \\servername /set /yes
REM To map a home directory to drive h:
net use h: /home /persistent:no
net use j: \\servername\ibay1 /persistent:no
net use p: \\servername\ibay2 /persistent:no
if exist Z: net use Z: /del /yes
and reset file to dos format
unix2dos /home/e-smith/files/samba/netlogon/netlogon.bat
== Slow login with win8 to sme8 domain ==
With certain networks you may have an issue with a slow login to the SME Server domain due to a timeout issue on the network. In this case you should install a second patch (in first you have to install the win8samba.reg).
This is what you need to find in your server-ressources
This is what you need to find in your server-ressources
cat /home/e-smith/files/server-resources/regedit/win7samba.reg
cat /home/e-smith/files/server-resources/regedit/windows_samba_performance.reg
Windows Registry Editor Version 5.00
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"SlowLinkDetectEnabled"=dword:00000000
"DeleteRoamingCache"=dword:00000001
"WaitForNetwork"=dword:00000000
"WaitForNetwork"=dword:00000000
"CompatibleRUPSecurity"=dword:00000001
After this you follow the usual way to add the patch to your windows registery
*Save the registry patch ('''windows_samba_performance.reg''') from https://your-server-ip/server-resources/regedit/ with your favourite web browser
*On your windows desktop, start "regedit" from the start menu and import the windows_samba_performance.reg
----
----
[[Category:Howto]]
[[Category:Howto]]
[[Category:Administration]]
[[Category:Administration]]