Hello! My Configuration: lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 14.04.3 LTS Release: 14.04 Codename: trusty Version Samba: samba-tool -V 4.4.4 My problem is, create a GPO with group Filtering, in case I want the GPO to be applied only to a specific group. When I do this (Filter) it does not load the GPO, only when I leave the default (Authenticated User). Is there something wrong with Samba or something different? Regards
> My problem is, create a GPO with group Filtering, in case I want the > GPO to be applied only to a specific group. > When I do this (Filter) it does not load the GPO, only when I leave > the default (Authenticated User). > Is there something wrong with Samba or something different?For a GPO to work, Authenticated Users must have "Read" permission. Please note that in order for the policy to be applied to a specific group, that group must have "Read" and "Apply group policy" permissions. So, giving "Read" permission to Authenticated Users does NOT apply the policy to all Authenticated Users. Please have a look at the following: Windows update changes Group Policy Security Filtering (MS16-072) http://www.mistercloudtech.com/2016/06/22/june-14th-windows-update-changes-group-policy-security-filtering/ What needs to be verified in order for a policy object to work is the following: Under the "Delegation" tab, click the "Advanced" button. A "Security Settings" box opens. Verify that "Authenticated Users" has "Read" permission. "Apply group policy" permission is NOT needed unless you specifically need it for your purposes. Alternatively, as per the Microsoft documents, give "Domain Computers" (or specific domain computers) at least "Read" permission. The relevant Microsoft documents are here: MS16-072: Security update for Group Policy: June 14, 2016 https://support.microsoft.com/en-gb/kb/3159398 The following page explains the issues and the corrective measures https://support.microsoft.com/en-gb/kb/3163622
Hello! Thanks. I'm trying but still unsuccessful ..... Regards Em 30-05-2017 16:25, Miguel Medalha escreveu:> >> My problem is, create a GPO with group Filtering, in case I want the >> GPO to be applied only to a specific group. >> When I do this (Filter) it does not load the GPO, only when I leave >> the default (Authenticated User). >> Is there something wrong with Samba or something different? > > For a GPO to work, Authenticated Users must have "Read" permission. > Please note that in order for the policy to be applied to a specific > group, that group must have "Read" and "Apply group policy" > permissions. So, giving "Read" permission to Authenticated Users does > NOT apply the policy to all Authenticated Users. > > Please have a look at the following: > > Windows update changes Group Policy Security Filtering (MS16-072) > http://www.mistercloudtech.com/2016/06/22/june-14th-windows-update-changes-group-policy-security-filtering/ > > > What needs to be verified in order for a policy object to work is the > following: > > Under the "Delegation" tab, click the "Advanced" button. A "Security > Settings" box opens. Verify that "Authenticated Users" has "Read" > permission. "Apply group policy" permission is NOT needed unless you > specifically need it for your purposes. Alternatively, as per the > Microsoft documents, give "Domain Computers" (or specific domain > computers) at least "Read" permission. > > The relevant Microsoft documents are here: > > MS16-072: Security update for Group Policy: June 14, 2016 > https://support.microsoft.com/en-gb/kb/3159398 > > The following page explains the issues and the corrective measures > https://support.microsoft.com/en-gb/kb/3163622 > > >