samba - Jan 2024 - Problem to change values with ldbedit if primary group is 512 (Domain Admins)

Dear samba community,
I wanted to delete roaming profiles for some users with ldbedit 
according to the wiki
https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles#Using_ldbedit_on_a_Domain_Controller

It works well for every user being in 513 (Domain Users) as 
primaryGroup. Some of our users have 512 as primaryGID. For those I'm 
not able to change any value with ldbedit.
I always get the following error:

failed to add CN=(xyz01) NameX,CN=Users,DC=domain,DC=local - The primary 
group isn't settable on add operations!

Does one of you have any idea how to get around this issue?

Running Samba Version 4.15.13-Ubuntu

take care
Holgi

On Wed, 03 Jan 2024 17:17:41 +0100
holgi via samba <samba at lists.samba.org> wrote:
> Dear samba community,
> I wanted to delete roaming profiles for some users with ldbedit 
> according to the wiki
>
https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles#Using_ldbedit_on_a_Domain_Controller
> 
> It works well for every user being in 513 (Domain Users) as 
> primaryGroup. Some of our users have 512 as primaryGID. For those I'm 
> not able to change any value with ldbedit.
> I always get the following error:
> 
> failed to add CN=(xyz01) NameX,CN=Users,DC=domain,DC=local - The
> primary group isn't settable on add operations!
> 
> Does one of you have any idea how to get around this issue?
> 
> Running Samba Version 4.15.13-Ubuntu
> 

My suggestion would be to first upgrade Samba (if possible), 4.15.x
is no longer supported by Samba, then put everyone's Primary group ID
back to Domain Users, I can see no reason to set any users primary
group ID to Domain Admins, why did you do this ?

Rowland