Windows 10 do not likes the netlogon share on server (Samba or Windows)

Aug 28
2015

Today, I had an interesting issue: Windows 10 (workgroup setting, local account) does not connect to the Samba netlogon share, even with the latest Samba version (4.2.3), it asks username and password.
Access to other shares works without any issue.
I had also checked the HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters\AllowInsecureGuest setting – it does not change anything.
My temporary solution was to create a new share, identical to the netlogon share, with another name – I choosed netlogonw10. Calling the login script from this share works.

The same is true also for netlogon shares on Windows servers, if the machine is not in the Windows domain

Why does the instr function in kixtart seems to not work correctly?

Mar 25
2014

Today, I had a problem with a login script specially for Windows 8 users with a microsoft account.

For these, the @userid macro of kixtart returns the full microsoft account, i.e. gregakselrod@outlook.com.

Since I was interested in the part before the @, I wrote the following script part:

$len = instr( @userid, “@” )
if $len == 0
$localuser = @userid
else
$localuser = substr( @userid, 1, $len – 1 )
endif

but it does not worked – $len was 0 all the time.

It seems kixtart interprets the @ character even if quoted. This is the fixed script:

$len = instr( @userid, chr( 64 ) )
if $len == 0
$localuser = @userid
else
$localuser = substr( @userid, 1, $len – 1 )
endif

Port reservation on Windows Server 2008 and 2008 R2 included SBS 2011

Jan 28
2014

If you need to reserve a port in Windows Server 2008, 2008 R2 or SBS 2001 (which is in fact a 2008 R2), it does not make any sense to modify the registry value

ReservedPorts

at

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters

as indicated at in the Microsoft KB 812873, because Windows Server 2008 and 2008 R2 does not support this setting anymore.
You need to request a hotfix from this page KB 2665809, install it and then you can control your port ranges with the commands (from an administrative command prompt of course):

netsh int ipv4 show excludedportrange protocol=tcp

to display active reservations, and add with

netsh int ipv4 add excludedportrange protocol=tcp startport=8000 numberofports=1

.
The command is documented at the MS KB page where you can find the hotfix.

WSUS and Windows 8/Windows 8.1 .NET Framework 3.5 installation from Windows Update

Nov 04
2013

This weekend, I have installed an SBS 2011 server that comes with WSUS for all domain PCs.

Unfortunately, after adding two Windows 8.1 PCs to the domain, they needed the .NET Framework 3.5 – not installed on Windows 8.x, but available as optional feature in the control panel (Programs and Features). This “feature” is installed through Windows Update, and not from the installation media.

With WSUS, this is not possible, and also the installation of printer drivers through Windows failed (HP does not delivers drivers for its OfficeJet K5400 printer, available only through Windows Update), and gave error 0x800F0906.

After a bit of searching, I found this article:

support.microsoft.com/kb/2734782

referring to exactly my problem.

Using the group policy editor (gpedit.msc) to modify the Administrative Templates, System, “Specify settings for optional component installation and component repair” to “Enabled” and checking the box “Contact Windows Update directly to download repair content instead of Windows Server Update Services (WSUS)”, followed by a gpupdate /force in an administrative command prompt, solved the problem.

So I would recommend to anyone in such an environment to change this setting in every Windows 8.x machine that is integrated in the domain.

Add Windows 7 PC to Samba Domain after IP address change

Aug 16
2013

Today, I had to change all IP addresses on a customers Samba network. (Really, the customer had two separate networks, and I have unified them to one).

After this, I had to add several Windows 7 PCs to the Samba domain, but the process failed, and the logs on the Samba server had no entries on this.

The error message was:

“The specified domain either does not exist or could not be contacted”

I had added the registry entries specified here:

wiki.samba.org/index.php/Registry_changes_for_NT4-style_domains

but nothing.

Finally, the nblookup tool downloadable from Microsofts website pointed me in the right direction: incorrect wins data!

The solution was simple:

/etc/init.d/samba stop
rm /var/lib/samba/wins.*
/etc/init.d/samba start

This recreated the correct wins database wins.tdb and the PC could be joined to the database.

Buffalo NAS: Change language from Japanese to English

Jul 27
2011

The Buffalo Technology TeraStation of a customer needed a firmware update – and after this the Web GUI was in Japanese language.

Unfortunately I could not find any solution because all I could find were targeting an older web interface (before 2010) totally different from the actual one.

Fortunately I had another LinkStation Mini in my network with the same Web GUI, so I could look where to find how to switch the language.

Please look at the screen shot below:

Language setting

Setup shared Fax on SBS 2011 for Windows XP computers

Jun 09
2011

Problem: Windows SBS 2011 don’t has 32 Bit drivers. You can use the ones from Windows Vista, but they don’t work for Windows XP.

You need:

–         A Windows Vista 32 Bit machine, and precisely the folder c:\windows\system32\driverstore\FileRepository\prnms002.

–         The fax driver files from a Windows Server 2003. Alternatively you can find them here: http://social.technet.microsoft.com/Forums/en-US/winserverprint/thread/adabe510-89ef-4856-935c-5cfbcecfe038/

There is a Microsoft KB article on this:

http://support.microsoft.com/kb/2532185

The solution comes most from the Technet forums post, but was tested by myself.

Steps:

  • In the share properties from the fax printer on the server, add 32 bit drivers, using the ones from the Windows Vista installation
  • Stop the spooler: net stop spooler
    This will ask you to stop also the fax service.
  • Copy the files FXSAPI.DLL, FXSDRV.DLL, FXSRES.DLL, FXSTIFF.DLL, FXSUI.DLL and FXSWZRD.DLL from the Windows Server 2003 installation (please look at the KB article where to find them or download them using the link in the Technet forums) to the folder c:\windows\system32\spool\drivers\w32x86\3 overwriting the existing ones
  • Insert this in the registry:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT
x86\Drivers\Version-3\Microsoft Shared Fax Driver]
“Configuration File”=”FXSUI.DLL”
“Data File”=”FXSUI.DLL”
“Driver”=”FXSDRV.DLL”
“Help File”=””
“Monitor”=””
“Datatype”=”RAW”
“Dependent Files”=hex(7):46,00,58,00,53,00,57,00,5a,00,52,00,44,00,2e,00,44,00,
4c,00,4c,00,00,00,46,00,58,00,53,00,54,00,49,00,46,00,46,00,2e,00,44,00,4c,
00,4c,00,00,00,46,00,58,00,53,00,52,00,45,00,53,00,2e,00,44,00,4c,00,4c,00,
00,00,46,00,58,00,53,00,41,00,50,00,49,00,2e,00,44,00,4c,00,4c,00,00,00,00, 00
“Previous Names”=hex(7):00,00,90,90
“Version”=dword:00000003
“TempDir”=dword:00000000
“Attributes”=dword:00000001
“Manufacturer”=””
“OEM URL”=””
“HardwareID”=””
“Provider”=””
“DriverDate”=hex:00,00,00,00,00,00,00,00
“DriverVersion”=hex:00,00,00,00,00,00,00,00

  • Restart the spooler: net start spooler
  • Restart the fax: net start fax
  • Install the fax on the XP clients like a shared printer. It could be that the client is asking for a Windows XP CD, so better you have one.
  • Done!