Hello, I've just set up my first samba server as a primary Active Directory domain controller. Everything seems to be working just fine. I've joined the domain with two Windows 10 machines and are able to log in successfully using the domain credentials. However, when I go to add a Microsoft Account to a domain profile I find I am unable to. After entering my login information nothing happens. Looking at the MS documentation there should be a rule in policy manager for "Block Microsoft accounts." I found it my local policy manager and made sure to set it to disabled but that doesn't seem to help. Is this a known issue? Is there a domain policy I need to modify? Thanks in advance, Jean-Philippe
On 11/01/16 18:24, Jean-Philippe Steinmetz wrote:> Hello, > > I've just set up my first samba server as a primary Active Directory domain > controller. Everything seems to be working just fine. I've joined the > domain with two Windows 10 machines and are able to log in successfully > using the domain credentials. However, when I go to add a Microsoft Account > to a domain profile I find I am unable to. After entering my login > information nothing happens.I am sure this is just a language problem :-) but do you mean, adding a profile attribute to a user account ? Or to put it another way, could you be a bit more specific on what you are trying to do and where. Rowland> > Looking at the MS documentation there should be a rule in policy manager > for "Block Microsoft accounts." I found it my local policy manager and made > sure to set it to disabled but that doesn't seem to help. Is this a known > issue? Is there a domain policy I need to modify? > > Thanks in advance, > > Jean-Philippe
On 11/01/16 19:04, Jean-Philippe Steinmetz wrote:> Sure. In short, I am trying to link a Microsoft Account to a domain > profile on the workstation. > > I log in to the workstation with the user profile controlled by the > samba AD server (e.g. MYDOMAIN\MyUser). Then once logged in I attempt > to link an existing Microsoft Account to that user profile. I do this > by going to Settings->Accounts->Add a Microsoft account.No, still not understanding this, have you provisioned samba4 as an active directory server ? If you have, why are you trying to link an active directory account with an active directory account? I feel I am missing something here ??? Rowland PS, please keep this on list> > When I select "Add a Microsoft account" I am prompted to enter the > user credentials of that account. I click sign-in but nothing happens > from that point and the account is not properly linked. > > After doing some searching online I discovered the following technet > page https://technet.microsoft.com/en-us/library/jj966262.aspx . The > page seems to indicate that the default state should allow MS accounts > to be linked but this only became a problem once I joined the computer > to the domain. Prior to that I was able to link the MS account > successfully to a local profile. > > On Mon, Jan 11, 2016 at 10:53 AM, Rowland penny <rpenny at samba.org > <mailto:rpenny at samba.org>> wrote: > > On 11/01/16 18:24, Jean-Philippe Steinmetz wrote: > > Hello, > > I've just set up my first samba server as a primary Active > Directory domain > controller. Everything seems to be working just fine. I've > joined the > domain with two Windows 10 machines and are able to log in > successfully > using the domain credentials. However, when I go to add a > Microsoft Account > to a domain profile I find I am unable to. After entering my login > information nothing happens. > > > I am sure this is just a language problem :-) but do you mean, > adding a profile attribute to a user account ? > > Or to put it another way, could you be a bit more specific on what > you are trying to do and where. > > Rowland > > > Looking at the MS documentation there should be a rule in > policy manager > for "Block Microsoft accounts." I found it my local policy > manager and made > sure to set it to disabled but that doesn't seem to help. Is > this a known > issue? Is there a domain policy I need to modify? > > Thanks in advance, > > Jean-Philippe > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >
Yes I have provisioned the samba server as an Active Directory domain controller (I mentioned that in the first e-mail). The reason for linking the two is to provide easy access to additional MS services that won't be hosted internally (e.g. OneDrive, Skype, MS Store). Ultimately I am using this as a private domain at home to simplify device management but I want to continue be able to use existing MS services as well. On Mon, Jan 11, 2016 at 11:13 AM, Rowland penny <rpenny at samba.org> wrote:> On 11/01/16 19:04, Jean-Philippe Steinmetz wrote: > >> Sure. In short, I am trying to link a Microsoft Account to a domain >> profile on the workstation. >> >> I log in to the workstation with the user profile controlled by the samba >> AD server (e.g. MYDOMAIN\MyUser). Then once logged in I attempt to link an >> existing Microsoft Account to that user profile. I do this by going to >> Settings->Accounts->Add a Microsoft account. >> > > No, still not understanding this, have you provisioned samba4 as an active > directory server ? > If you have, why are you trying to link an active directory account with > an active directory account? > > I feel I am missing something here ??? > > Rowland > > PS, please keep this on list > >> >> When I select "Add a Microsoft account" I am prompted to enter the user >> credentials of that account. I click sign-in but nothing happens from that >> point and the account is not properly linked. >> >> After doing some searching online I discovered the following technet page >> https://technet.microsoft.com/en-us/library/jj966262.aspx . The page >> seems to indicate that the default state should allow MS accounts to be >> linked but this only became a problem once I joined the computer to the >> domain. Prior to that I was able to link the MS account successfully to a >> local profile. >> >> On Mon, Jan 11, 2016 at 10:53 AM, Rowland penny <rpenny at samba.org >> <mailto:rpenny at samba.org>> wrote: >> >> On 11/01/16 18:24, Jean-Philippe Steinmetz wrote: >> >> Hello, >> >> I've just set up my first samba server as a primary Active >> Directory domain >> controller. Everything seems to be working just fine. I've >> joined the >> domain with two Windows 10 machines and are able to log in >> successfully >> using the domain credentials. However, when I go to add a >> Microsoft Account >> to a domain profile I find I am unable to. After entering my login >> information nothing happens. >> >> >> I am sure this is just a language problem :-) but do you mean, >> adding a profile attribute to a user account ? >> >> Or to put it another way, could you be a bit more specific on what >> you are trying to do and where. >> >> Rowland >> >> >> Looking at the MS documentation there should be a rule in >> policy manager >> for "Block Microsoft accounts." I found it my local policy >> manager and made >> sure to set it to disabled but that doesn't seem to help. Is >> this a known >> issue? Is there a domain policy I need to modify? >> >> Thanks in advance, >> >> Jean-Philippe >> >> >> >> -- To unsubscribe from this list go to the following URL and read >> the >> instructions: https://lists.samba.org/mailman/options/samba >> >> >> > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >