Hi all,
We have w2003 servers and xp clients and have offline files enabled on certain machines.
often we get message saying you are working offline and then have no access to mapped drives etc. This okay if we double click on the offline files 'computer' in the systray.
However, a big problem occurs when the password for a user expires and they try to change the passowrd they gat an error saying that the domain is not available.
I found this thread here:
Which basically says turn of SMB signing for both server and client in local security policy and on DC security policy.
This is okay and it seems to be working but is there a fix for this? According to this KB:
there was a hotfix but I can't see how come XP service pack two doesn't fix this. All our machines are up to date and so are our servers.
I'd rather have SMB signing on -mitigates any MITM attacks and all that which there isn't a huge risk of here but you never know how smart some of these user could be....
We have w2003 servers and xp clients and have offline files enabled on certain machines.
often we get message saying you are working offline and then have no access to mapped drives etc. This okay if we double click on the offline files 'computer' in the systray.
However, a big problem occurs when the password for a user expires and they try to change the passowrd they gat an error saying that the domain is not available.
I found this thread here:
Which basically says turn of SMB signing for both server and client in local security policy and on DC security policy.
This is okay and it seems to be working but is there a fix for this? According to this KB:
there was a hotfix but I can't see how come XP service pack two doesn't fix this. All our machines are up to date and so are our servers.
I'd rather have SMB signing on -mitigates any MITM attacks and all that which there isn't a huge risk of here but you never know how smart some of these user could be....
