samba - May 2015 - Deny login for a specific user in a specific machine in a samba domain

Hi, I have samba as a PDC and I need to deny login for a specific user in a
specific machine. How can I achieve that?
-- 
Rodrigo Abrantes Antunes
Instituto Federal Sul-rio-grandense

PDC or ADDC? You could achieve this with a GPO.

Regards
Tim

Am 18. Mai 2015 18:20:28 MESZ, schrieb Rodrigo Abrantes Antunes
<rodrigoantunes at pelotas.ifsul.edu.br>:
>Hi, I have samba as a PDC and I need to deny login for a specific user
>in a
>specific machine. How can I achieve that?
>-- 
>Rodrigo Abrantes Antunes
>Instituto Federal Sul-rio-grandense
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba

PDC. I'm using samba 3, I need scripts to apply GPO?

Citando Tim <lists at kiuni.de>:
> PDC or ADDC? You could achieve this with a GPO.
>
> Regards
> Tim
> ?
>   Am 18. Mai 2015 18:20:28 MESZ, schrieb Rodrigo Abrantes Antunes
> <rodrigoantunes at pelotas.ifsul.edu.br>:
>> Hi, I have samba as a PDC and I need to deny login for a specific user
>> in a specific machine. How can I achieve that?
-- 
Rodrigo Abrantes Antunes
Instituto Federal Sul-rio-grandense

You can use:
net sam set workstations

However, as much as I wish it worked in a deny mode it only works in
an accept mode. So instead of setting which workstations a user cannot
use you set the workstations the user is allowed to use. Which means
that if you want to deny the user login access to only 1 of 100
systems, you need to allow access to the other 99:
net sam set workstations username "sys1,sys2,sys3,sys4,..."

I had noted a request for this to work in deny mode some years ago but
there was not any replies to said post.

Chris



On Mon, May 18, 2015 at 12:20 PM, Rodrigo Abrantes Antunes
<rodrigoantunes at pelotas.ifsul.edu.br> wrote:
> Hi, I have samba as a PDC and I need to deny login for a specific user in a
> specific machine. How can I achieve that?
> --
> Rodrigo Abrantes Antunes
> Instituto Federal Sul-rio-grandense
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba