Nov 232006
 

One of the things you’ll notice quickly is that by default, Windows Vista will not map samba shares – nor can you use Samba as a PDC (Primary Domain Controller). This is due to the default security policy of Windows Vista only using NTLMv2 for authentication – something Samba doesn’t support as yet.

To fix this, run (Win+R) “secpol.msc”

Navicate to Local Policies -> Security Options

Change the value of the policy “Network Security: LAN Manager authentication level” from “NTVLM2 responses only” to “LM and NTLM – use NTLMv2 session security if negotiated”

This should now allow Windows Vista to both map network drives based on Samba servers, and use Samba as a PDC.

  3 Responses to “Windows Vista and Samba shares”

  1. I tried this policy to see if it would work for accessing a share on Vista from Fedora but will not accept the password. Do you know if there is a policy that will fix this issue?

    Thanks

  2. Fedora Core 6 uses Samba 3.0.23c at this point in time. This doesn’t support the new authentication methods used in Windows Vista by default. While I don’t have an exact answer to your question, if you can disable NTVLM2 authentication on Windows Vista share side, it should allow it to operate with Fedora Core (and pretty much any samba version) as a client.

    This will continue to be an issue until Samba implements NTVLM2 authentication.

  3. […] The first of the two refers to Samba. One of the things you’ll notice quickly is that by default, Windows Vista will not map samba shares – nor can you use Samba as a PDC (Primary Domain Controller). This is due to the default security policy of Windows Vista only using NTLMv2 for authentication – something Samba doesn’t support as yet. […]

 Leave a Reply

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>

(required)

(required)