I am not sure how it got fixed but now it works.
I deleted the registry key, deleted, and deleted their roaming profile from
their home directory. And all works now.
------Original Message------
From: Menders
To: samba@lists.samba.org
Subject: The Group Policy Client service failed the logon. Access is denied.
Sent: Jan 4, 2012 02:38
Hello all,
Let give the background. We replaced our PDC with a new
machine. Both old and new machines are running Debian 6.0 Squeeze and
Samba 3.5.6. moved all data and user accounts to new server. New
server has the exact same configuration files as the old server. All
machines have been rejoined to the domain both WinXP and Win7. The
WinXP machines work perfectly all domain users can login with their
roaming profiles and all is good. However on the Win7 machines none
of the network users can log in to the machine. Upon attempting you
get the this error "The Group Policy Client service failed the logon.
Access is denied." After Googling around for a solution I have
attempted the following solutions:
1) Delete the roaming profile
Machine recreates the roaming profile but denies login
2) Delete registry key from
HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows NT>Current
Version>Profilelist>[USERSKEY]
Machine recreates the key but denies login
3) Both 1&2 at the same time
Machine recreates the roaming profile and the key but denies login
Any pointers would be greatly appreciated see smb.conf file below.
[global]
smb passwd file = /etc/samba/passdb.tdb
enable privileges = yes
logon drive = H:
domain master = yes
encrypt passwords = true
logon home = \\%L\%U
netbios name = ARDVARC
server string = Gaudior's PDC
logon script = logon.bat
local master = yes
workgroup = GAUACA
logon path = \\%L\%U\profile
os level = 99
security = user
add machine script = /usr/sbin/useradd -s /bin/false \-d /dev/null %u
preferred master = yes
domain logons = yes
hide files = /desktop.ini/$RECYCLE.BIN/profile/profile.V2/
guest account = nobody
map to guest = bad user
wins support = yes
[staff]
comment = staff share drive
path = /home/staff/share
read only = no
;valid users =
[student]
comment = student share by level
path = /home/student/share
read only = no
[netlogon]
comment = Net Logon Service
path = /home/netlogon
read only = yes
write list = root
public = yes
guest ok = yes
browsable = no
[homes]
comment = Home
valid users = %S
read only = no
browsable = no
--
Mathew E. Enders
"Where once Samba and Apache sold Linux to the world they are now just
part of the plumbing. But that's OK, plumbers make good money."
--Jeremy Allison
Mat Enders from my BlackBerry®
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
