samba - Dec 2014 - How to restory 'Display information about previous logons'

Hi,

After enable display information about previous logons on the default
domain policy, no one can logon the samba4 domain.

How can I disable it by ldap modify or just reset to the default
domain policy (if we are unlucky) ?

--
Dongsheng

Policies are stored in /path/to/sysvol/<realm>/Policies.

I have not tried, but I am quite sure you can simple remove the policy
there. mv {long-guid} ~/backup-long-guid or something like that.

Regards,
Gerben
Dongsheng Song schreef op vr 19-12-2014 om 00:08
[+0800]:
> Hi,
> 
> After enable display information about previous logons on the default
> domain policy, no one can logon the samba4 domain.
> 
> How can I disable it by ldap modify or just reset to the default
> domain policy (if we are unlucky) ?
> 
> --
> Dongsheng

On Fri, Dec 19, 2014 at 12:13 AM, Germ van Eck <germ at esyst.nl>
wrote:
> Policies are stored in /path/to/sysvol/<realm>/Policies.
>
> I have not tried, but I am quite sure you can simple remove the policy
> there. mv {long-guid} ~/backup-long-guid or something like that.
>
Thanks. When I backup and remove
/var/lib/samba/sysvol/example.com/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}/MACHINE/Registry.pol,
logon to the workstation with local administrator which have issues,
run 'gpupdate /force', then the domain users can logon now.