samba - Mar 2009 - disable logons for all users but Domain Admin?

Is it possible to disable domain logons for all users but Domain Admins?


-- 
Tomasz Chmielewski
http://wpkg.org

Tomasz Chmielewski schrieb:
> Is it possible to disable domain logons for all users but Domain Admins?
Seems like setting "L" in sambaAcctFlags does the job.

The problem is how to do it globally ;)

I exported users from LDAP and added "L" flag to all User accounts,
but
Administrator. Then, deleted users and imported the changed ldif.


-- 
Tomasz Chmielewski
http://wpkg.org

Hello Tomasz,


you can easily modify Samba LDAP users through a script with the
smbldap-tools (http://linux.die.net/man/8/smbldap-usermod in this
particular case).


Regards

2009/3/2 Tomasz Chmielewski <mangoo@wpkg.org>:
> Tomasz Chmielewski schrieb:
>>
>> Is it possible to disable domain logons for all users but Domain
Admins?
>
> Seems like setting "L" in sambaAcctFlags does the job.
>
> The problem is how to do it globally ;)
>
> I exported users from LDAP and added "L" flag to all User
accounts, but
> Administrator. Then, deleted users and imported the changed ldif.
>
>
> --
> Tomasz Chmielewski
> http://wpkg.org
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: ?https://lists.samba.org/mailman/options/samba
>


-- 
The box said Windows Vista or better. So I bought a Mac.