Access Samba shares with Windows7 Professional

published September 27th, 2010 | categories: Featured, Headline, how-to, Informational, Installing, Linux, Microsoft, Resources | all categories

If you operate BIND9, DHCP3, and Samba on a network and are having difficulties connecting to Samba shares, you are not alone. A couple of things need to be changed for Windows7 to communication properly with Samba. The primary issue is that when you attempt to connect to a Samba share that is essentially wide open to the public, Windows7 asks for credentials in the form of a username and password. The first thing to try is to input the username of “anonymous” with an empty password. Essentially, this will be your user credentials. If that does not work, try  the following:

Add the following statements to your /etc/samba/smb.conf and then restart Samba.

protocol = LANMAN2
client lanman auth = yes
client ntlmv2 auth = yes
lanman auth = yes
ntlm auth = yes

Next, follow these two links and read through the forums posts. They describe a few registry additions and Local Security Policy changes that need to be made.

Summary: a fewadditions to the registry…

DWORD  DomainCompatibilityMode = 1
DWORD  DNSNameResolutionRequired = 0

DWORD  RequireSignOnSeal = 0
DWORD  RequireStrongKey = 0


Control Panel > Administrative Tools > Local Security Policy (or secpol.msc)

Local Policies > Security Options

Network security: LAN Manager authentication level
Send LM & NTLM responses

Minimum session security for NTLM SSP
Disable Require 128-bit encryption

Related Posts

Previous Post: «
Next Post: »
Do you have something to say? Send me a message on Twitter @nwlinux.

Recent Posts

Adding a LCD monitor to the air monitoring data logger cube
categories include: Hardware

Office Prank: too many sticky notes
categories include: Images

Zero and Span using Advantech Device Manager
categories include: Hardware


About >> I'm a Network Administrator out of Olympia, WA.

Social >> You can find me on Twitter @nwlinux or LinkedIn.

RSS Feed >> You can hit up FeedBurner.