Microsoft Deployment Toolkit 2012 breaks Samba access

During a recent project I used Microsoft Deployment Toolkit 2012 (MDT) to deploy Windows 7 SP1. In this latest release of MDT they build-in a new feature called GPO Packs.

GPO Packs are explained in detailed here. In short, GPO Packs are group policy baselines that set the security level.

For Windows 7 SP1 MDT enables the highest Windows 7 SP1 GPO Pack.
Nothing wrong with that until you need to access a Samba share on Linux. Then the following error occurs:

Windows cannot access: *share location*

Check the spelling of the name. Otherwise, there might be a problem with your network. To try to identiry and resolve network problems, click Diagnose.

Error code 0x80004005.

 

Using your favorite search engine, you will find solutions like:

Start the Local Security Policy (secpol.msc), click on Local Polices, Security Options and start changing the values of:

Domain member: Digitally encrypt or sign secure channel data (always)

Domain member: Digitally encrypt or sign secure channel data (when possible)

Network security: LAN Manager authentication level

or

Disable IP 6

or

Flush the Credential Manager.

Etc.

 

But this did not work for me because not all the settings were changed correctly. And there are so many policy options that it was to cumbersome.
I decided to disable GPO Packs by opening the MDT Task Sequence and select Apply Local GPO Package. Then, on the Options tab, it is possible to de-select Enabled.

image

Then I re-run the Windows 7 SP1 deployment. Afterwards I was able to access the Samba share!

 

Can’t get the solution to work? Contact me and let me do the trick.

 

 

 

Advertisements
This entry was posted in Microsoft General, System Center. Bookmark the permalink.

One Response to Microsoft Deployment Toolkit 2012 breaks Samba access

  1. Chris says:

    Thanks for this post. I just came across this issue with my reference images created with MDT2012. Was driving me nuts.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s