Can't connect to Samba from Windows 7. Vista & XP OK. Many popular solutions tried without success.
This is an old story, a problem with many different solutions on line. But I've tried 'em all and none have worked for me yet. I'm hoping someone can give another suggestion. I have an old Red Hat Linux box that I use, amongst other things, to run Samba (vsn.2.2.3a). My Vista and Win XP PCs can access the p/w-protected Samba shares but a new Windows 7 Ultimate 64-bit PC cannot. All are on a workgroup-only LAN - no domain. UAC is turned off. I can see the Linux box's icon and shared directories in 'Network' from the Win 7 machine but when I try to access a Samba share it says "\\LX\roy is not accessible. You might not have permission to use this network resource." etc. But the XP and Vista boxes still have full access. After each change tried, I rebooted the Win7 box. These are the steps I've taken, based on suggestions found in threads here and elsewhere on the Web: 1. Start > RUN > control userpasswords2 > Advanced > Manage Passwords to ensure that \\LX\roy password is set correctly and is the same as for XP and Vista PCs. If I remove the password here, I can't see the shared directories on the Samba box - it asks for credentials. I give it the name and password, then it lets me see the shared directories. But when I double-click on one of those, I get the 'not accessible...' message. The same name and password give me full access when typed from an XP or Vista box. 2. With gpedit.msc > Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options > Microsoft network client: Send unencrypted password to third-party SMB server: Switched to "Enabled". 2b. and then set Network security: LAN Manager authentication level: Set to Send LM & NTLM - use NTLMv2 session security if negotiated. 2c. I also tried "Send LM & NTLM responses". This seems to be the solution that works for many people with this problem, but not for me. 2d. and then set Network access: Sharing and security model for local accounts: Classic local users authenticate as themselves. 2e. Minimum session security for NTLM SSP are both set to 'no minimum' for both clients and servers. An image showing all my local security settings is here: http://www.gandanet.com.hk/local_security_policy.png 3. I checked or changed these registry keys KEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa and found that LmCompatibilityLevel was already set to 1 (perhaps by action 2). 3a. Based on another suggestion, I changed it to 2 ... This made no difference. 3b. I added this, (based on J Paige's solution here: http://social.technet.microsoft.com/Forums/en/w7itprosecurity/thread/e30589d3-ab5a-4233-a199-7d5caf395875) HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Netlogon\Parameters "AllowNT4Crypto"=dword:1 -allow less secure encrypted passwords (intermediate keys must be created) 4. I tried making my Win 7 password the same as my Samba p/w (the user name was already the same). Same result. 5. I set up Windows XP Mode in a Windows Virtual PC, because I read (http://social.technet.microsoft.com/Forums/en-US/w7itprovirt/thread/e08c3500-a722-4b44-b644-64f94f63c8e5/) that giving the share a drive letter in Windows XP Mode makes that drive letter available in Win 7 as well. But that doesn't work for me - XP mode does indeed have access to the Samba shared directories through a drive letter, but I do not see the drive letter in Win 7, and accessing the shares from Win 7 does not work, even if I set up . 6. Based on a suggestion here: http://social.technet.microsoft.com/Forums/en-US/w7itpronetworking/thread/ebc46c02-09df-4c8a-82b8-d1e4e0a8eddd I tried a batch file like this: net use z: /del net use net use /persistent:yes net use z: \\LX\share mypasswd /user:roy That completes successfully, but when I try to open Z:, it tells me that Z: is not accessible, Access is denied. 7. I've run Wireshark, but it doesn't tell me much as don't know how to interpret its output. I see [Malformed packet] messages, which perhaps may mean that the packet is encrypted but Samba doesn't expect it to be. The Linux box does part of what I need for ecommerce - the in-house part, it's not accessible to the Internet. As my Linux Fu is weak, I have to avoid changes to the Linux box, so I'm hoping someone can tell me what to do to Win 7 to make it behave like XP and Vista when accessing this share. Can anyone help me with any ideas, after all the above have been exhausted? Thanks!
August 3rd, 2012 6:00am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics