Mac OS X Server: Cannot authenticate to SMB shares when bound to Windows Server 2008 Active Directory

Users connecting from clients that are not bound to Active Directory may be unable to authenticate to SMB shares hosted on a Mac OS X Server which is bound to Active Directory containing Windows Server 2008 domain controllers.

This article has been archived and is no longer updated by Apple.

Enable "Allow cryptography algorithms compatible with Windows NT 4.0" on the Windows Server 2008-based domain controller. More information can be found at: .

As an alternative, you can bind the clients to Active Directory.

Important: Mention of third-party websites and products is for informational purposes only and constitutes neither an endorsement nor a recommendation. Apple assumes no responsibility with regard to the selection, performance or use of information or products found at third-party websites. Apple provides this only as a convenience to our users. Apple has not tested the information found on these sites and makes no representations regarding its accuracy or reliability. There are risks inherent in the use of any information or products found on the Internet, and Apple assumes no responsibility in this regard. Please understand that a third-party site is independent from Apple and that Apple has no control over the content on that website. Please contact the vendor for additional information.
Published Date: