Microsoft Deployment Toolkit 2012 breaks Samba access

Posted on Posted in Microsoft General, System Center

During a recent project I used Microsoft Deployment Toolkit 2012 (MDT) to deploy Windows 7 SP1. In this latest release of MDT they build-in a new feature called GPO Packs.

GPO Packs are explained in detailed here. In short, GPO Packs are group policy baselines that set the security level.

For Windows 7 SP1 MDT enables the highest Windows 7 SP1 GPO Pack.
Nothing wrong with that until you need to access a Samba share on Linux. Then the following error occurs:

Windows cannot access: *share location*

Check the spelling of the name. Otherwise, there might be a problem with your network. To try to identiry and resolve network problems, click Diagnose.

Error code 0x80004005.

 

Using your favorite search engine, you will find solutions like:

Start the Local Security Policy (secpol.msc), click on Local Polices, Security Options and start changing the values of:

Domain member: Digitally encrypt or sign secure channel data (always)

Domain member: Digitally encrypt or sign secure channel data (when possible)

Network security: LAN Manager authentication level

or

Disable IP 6

or

Flush the Credential Manager.

Etc.

 

But this did not work for me because not all the settings were changed correctly. And there are so many policy options that it was to cumbersome.
I decided to disable GPO Packs by opening the MDT Task Sequence and select Apply Local GPO Package. Then, on the Options tab, it is possible to de-select Enabled.

image

Then I re-run the Windows 7 SP1 deployment. Afterwards I was able to access the Samba share!

 

Can’t get the solution to work? Contact me and let me do the trick.

 

 

 

One thought on “Microsoft Deployment Toolkit 2012 breaks Samba access

  1. Thanks for this post. I just came across this issue with my reference images created with MDT2012. Was driving me nuts.

Leave a Reply

Your email address will not be published. Required fields are marked *