Marcio Demetrio Bacci
2017-Jul-03 00:04 UTC
[Samba] Can't create/update Group Policy in Samba 4.6.5
Hi Miguel, Can I remove Unix Attributes of the Administrator user and other administrator groups (set up NIS Domain to "none") ? I have given SeDiskOperatorPrivilege to "Domain Admins" group. *net rpc rights grant "EMPRESA\Domain Admins" SeDiskOperatorPrivilege -U "EMPRESA\administrator"* Enter EMPRESA\administrator's password: Successfully granted rights. I have executed this following commands, but OS and Server are empty: *smbclient //localhost/netlogon -UAdministrator -c 'ls'* Enter EMPRESA\Administrator's password: Domain=[EMPRESA] OS=[] Server=[] . D 0 Mon May 15 19:09:10 2017 .. D 0 Sun Jul 2 17:07:24 2017 39189944 blocks of size 1024. 34372144 blocks available *smbclient -L localhost -U%* Domain=[EMPRESA] OS=[] Server=[] Sharename Type Comment --------- ---- ------- netlogon Disk sysvol Disk IPC$ IPC IPC Service (Samba 4.6.5) Domain=[EMPRESA] OS=[] Server=[] Server Comment --------- ------- Workgroup Master --------- ------- Regards, Márcio Bacci 2017-07-02 19:31 GMT-03:00 Miguel Medalha via samba <samba at lists.samba.org>:> > 1) Who is '30056' ? 30056 is the Administrator user. > Administrator should remain as ID0. > > > 2) Have you given 'Administrator' a uidNumber ? Yes, I set up Unix > > Attribute to Administrator and "Domain Admins", "Domain Controllers" > > > and others groups. > Don't do it. Administrator is a special case. > > > 3) Have you given 'Domain Admins' the 'SeDiskOperatorPrivilege' ? No. Is > > necessary? > Yes. > > You should follow this Samba Wiki guide: > > Setting up Samba as an Active Directory Domain Controller > https://wiki.samba.org/index.php/Setting_up_Samba_as_an_ > Active_Directory_Domain_Controller > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >