One of the things that is annoying me about Vista is that I can’t
connect to my SMB shares on my Mac. When I try to log in, it rejects my
password. I looked at /var/log/samba/log.smbd on my Mac, and here’s
what I saw:
[2006/09/21 13:55:45, 1] auth_ods.c:opendirectory_ntlmv2_auth_user(312)
User "bjepson" failed to authenticate with
"dsAuthMethodStandard:dsAuthNodeNTLMv2" (-14090)
So I poked around the Group Policy Edit (type gpedit.msc into the
search or address box and press enter). I drilled down into:
Local Computer Policy
-> Computer Configuration
-> Windows Settings
-> Security Settings
-> Local Policies
-> Security Options
and I changed “Network security: LAN Manager authentication level” to
“Send LM & NTLM – use NTLMv2 session security if negotiated” and it
seems to work.
Ah! Many thanks for this – I’ve been struggling with this all week
Instead of lowering your security posture on Vista, why not configure your Mac to properly support NTLMv2?
http://www.imss.caltech.edu/cms.php?op=wiki&wiki_op=view&id=337
http://www.microsoft.com/mac/otherproducts/otherproducts.aspx?pid=windows2000sfm
Thanks, Chris. I didn’t know that Microsoft distributed client bits for Services for Mac. What I’m trying to do is connect from Windows to a Mac Samba server, though. Since this is a client authentication module for the Mac, I’m not sure how it would integrate with the Samba server on the Mac.
Thank you very much, sir. I’ve been itching to hack around on Vista, but I’m a Mac guy too, so ran into this problem within moments of getting a Vista machine built. Problem solved.
Thanks again.
Thanks! You nailed it. I.ve been trying to connect to a Samba server on a suse 9.0 virtual machine running under vista rc1
Worked like a charm, thnx.
Thanks a ton, it’s to bad “our friends” at M$ don’t make things like this easier.
Many thanks – worked a charm here connecting to Mac OS X Server 10.3.9. Saved me hours!!
“Brilliant!” i thought to myself as I came across this page.
“Blast!” i thought to myself as I reaslised my crappy work computer has Vista Home installed and apparently no gpedit.msc.
Any ideas on how to achieve a similar result on Vista Home?
Paul,
Start up regedit and change this value:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\LMCompatibilityLevel from a 3 to a 1
Thanks Yvo!
Worked perfectly once I’d made the change as you described.
Paul
Thanks so much! Worked like a charm! Saved me tons of looking, as our whole company is switching to Vista and I had to figure out how to get it to work
. Thanks again!
thanks tons for this. nice!!
Thank you for this I couldnt connect, found this thru google in ten seconds. Worked like a charm.