We've had a problem using Samba 3.3.2 and windows 2000 workstations sp4. After many tests, it was discovered that when the netbios name has an hyphen the windows 2000 workstations don't see the groups on the samba domain, but when the name is changed for one without hyphen the error doesn't occur. Steps to reproduce the problem: - Configure samba 3.3.2 as domain controller - Fill the netbios name parameter (smb.conf) using a name with hyphen like: xxx-yyy - Join the w2k workstation on the domain - On the w2k workstation, logon using a non-administrative account and type "net user <user> /domain" - The result will be "access denied" Do the same test using a netbios name without hyphen (it works!).
weird, I don't think this is a generic issue. If you still experience this with modern samba versions, please reopen this bug report and attach level 10 log file showing the failed authentication attempt.