Voltar
-
Título
Password reset fails via DPA fails on Windows 2012 and above -
Descrição
Trying to reset a password for a local user on Windows Server 2012 or 2012 R2 or above. When affinity is set to the TPAMCONSOLE the reset is successful
Changing the affinity to DPA the following lines appear in the output:
Could not connect to serverConnection failed: NT_STATUS_INVALID_NETWORK_RESPONSEConnection failed: NT_STATUS_INVALID_NETWORK_RESPONSEutils/net_rpc.c:run_rpc_command(128)failed to make ipc connection: NT_STATUS_INVALID_NETWORK_RESPONSE -
Causa
SMB v1.0 protocol disabled on the target server, and the DPAv3 does not support SMB v2.0. -
Resolução
WORKAROUND 1
Enable SMB on the target server.More information can be found here - https://technet.microsoft.com/en-us/library/jj635714(v=wps.630).aspx
The command to Disable SMB v1.0, run this command in PowerShell:
Set-SmbServerConfiguration –EnableSMB1Protocol $false
The command to Enable SMB v1.0:
Set-SmbServerConfiguration –EnableSMB1Protocol $true
WORKAROUND 2
Set the affinity to the TPAMConsole
STATUSThe use of DPA v4 has added support for a DPA to utilize SMBv2 / SMBv3 for Windows password changes.
If you are currently licensed for a virtual DPA you can download the Virtual DPAv4 from hereIf you currently have hardware DPA 3.x appliances and you want to swap these for hardware DPA 4.x appliances, you will need to contact your Sales or Account Rep to discuss this. -
Solicitação de alteração
BFER 8274