I have RedHat 9 installed on one machine using Samba to share files. Windows 2000 clients that are not in any domain (just WORKGROUP) can connect fine. When anyone tries to connect from a Windows 2000 machine that is joined to an Active Directory domain, however, they cannot connect.

They are prompted for a password, but when it is entered, they get a message that says, "The account is not authorized to log in from this station."

I am using user security on the Samba server. Do I need to change to domain security and join the Samba machine to the AD domain? (I don't really want to.) There are no hosts disallowed, and Samba tests fine.

Anyone know what the issue might be?

I thought you can't do that, it's a feature expected in Samba 4, but this seems to disagree: http://acd.ucar.edu/~fredrick/linux/samba3/