This tip came from an experience with Windows 2008 Home Server and Mac OS X 10.4 client systems trying to authenticate for file sharing.
Symptom: No matter which user name you use to try to connect to the server it always says it’s the wrong one.
The issue is that 2008 uses Digitally signed communications which means for any SMB connections to happen the client must support this.
10.4 does not and will not support this. The only fixes are to upgrade the client or to disable packet signing (my preference).
Below is the instruction set to disable the requirement to connect. I have tested and it works.
To disable SMB packet signing enforcement based domain controllers:
- To open GPMC click Start click Run type gpmc.msc and then click OK.
- In the console tree right-click Default Domain Controllers Policy in DomainsCurrent Domain NameGroup Policy objectsDefault Domain Controllers Policy and then click Edit.
- In the Group Policy Management Editor window in the console tree go to Computer Configuration/Policies/Windows Settings/Security Settings/Local Policies/Security Options.
- In the details pane double-click Microsoft network server: Digitally sign communications (always).
- Verify that the Define this policy setting check box is selected click Disabled to prevent SMB packet signing from being required and then click OK.
- To apply the Group Policy change immediately either restart the domain controller or open a command prompt type the following command and then press ENTER:
- gpupdate /force