Am 2016-11-25 um 12:10 schrieb Stefan Kania via samba:> Am 25.11.2016 um 10:12 schrieb Stefan G. Weichinger via samba: >> >> Just a general question ahead: >> >> I have various issues with Samba-4.2.10 on Debian 8.6 (in combination >> with NT4-based domain and Win10pro-clients). >> > Windows 20 is NOT supporting NT-style Domains anymore, no matter which > Samba-Version you are using. You can do it, but you have to make a lot > of changes in the registry of any of your Windows 10 clients. So better > switch to AD.Is there any comprehensive list or guide on what registry-changes are needed? In the specific case it will be problematic in terms of budget to add a domain-switch now as well. I already tried to upgrade the given domain in a test VM, I always hit small issues and therefore hesitated to roll that domain out in production. Although it shouldn't be that hard, it is a small domain with ~30 users and nothing in it aside from users/passwords as far as I understand. I perfectly understand and agree that the switch would be best, I just haven't done that sucessfully before and have to maintain a productive environment there all the time. This is why I stayed with NT4-domain so far and only switched hardware and OS recently. Now I see problems with joining PCs to the domain, and issues with login scripts etc ... I search and google my way through but it doesn't feel solid so far. Thanks all, nice weekend, Stefan
On Sat, 26 Nov 2016 11:28:02 +0100 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:> Am 2016-11-25 um 12:10 schrieb Stefan Kania via samba: > > Am 25.11.2016 um 10:12 schrieb Stefan G. Weichinger via samba: > >> > >> Just a general question ahead: > >> > >> I have various issues with Samba-4.2.10 on Debian 8.6 (in > >> combination with NT4-based domain and Win10pro-clients). > >> > > Windows 20 is NOT supporting NT-style Domains anymore, no matter > > which Samba-Version you are using. You can do it, but you have to > > make a lot of changes in the registry of any of your Windows 10 > > clients. So better switch to AD. > > Is there any comprehensive list or guide on what registry-changes are > needed? In the specific case it will be problematic in terms of > budget to add a domain-switch now as well. > > I already tried to upgrade the given domain in a test VM, I always > hit small issues and therefore hesitated to roll that domain out in > production. > > Although it shouldn't be that hard, it is a small domain with ~30 > users and nothing in it aside from users/passwords as far as I > understand. > > I perfectly understand and agree that the switch would be best, I > just haven't done that sucessfully before and have to maintain a > productive environment there all the time. > > This is why I stayed with NT4-domain so far and only switched > hardware and OS recently. Now I see problems with joining PCs to the > domain, and issues with login scripts etc ... I search and google my > way through but it doesn't feel solid so far. > > Thanks all, nice weekend, Stefan > >How have you tried to upgrade and what problems did you have ? Rowland
Am 2016-11-26 um 12:04 schrieb Rowland Penny via samba:> How have you tried to upgrade and what problems did you have ?I will have to retry that now with current releases etc, my tests were months ago and I couldn't exactly tell the points now. As far as I remember something around the groups failed. I will set up a debian-test-VM (same as the current NT4-PDC) and retry the "classic update", then report back. Thanks.
On Sat, Nov 26, 2016 at 2:28 AM, Stefan G. Weichinger via samba < samba at lists.samba.org> wrote:> I already tried to upgrade the given domain in a test VM, I always hit > small issues and therefore hesitated to roll that domain out in production. > > Although it shouldn't be that hard, it is a small domain with ~30 users > and nothing in it aside from users/passwords as far as I understand. > > I perfectly understand and agree that the switch would be best, I just > haven't done that sucessfully before and have to maintain a productive > environment there all the time. >I recently upgraded our domain from NT-style to AD. It is about the same size as yours. I hired a consultant to help. His firm has done many upgrades on domains of all sizes. There were a bunch of little things that came up during the process that I would have needed help to resolve but he was able to handle all of them. I am really happy with the results. Let me know if you want a reference. The work can be done entirely remotely.