samba - Apr 2018 - cannot set share ACLs

Hi,

Following the wiki page Setting_up_a_Share_Using_Windows_ACLs
windows shows me this error after clicking on Shares:

Disk Management could not start the Virtual Disk Service (VDS) on 
'COMPUTER'. This can happen if the remote computer does not support VDS,
or if a connection cannot be established because it was blocked by 
Windows Firewall.

Tested on a new provisioned AD-DC server.
The samba server does not have a firewall, Windows only its default.
I can use RSAT tools for configuring DNS, Users, and GPOs.
Accessing shares and setting filesystem ACLs also works.
Only setting share ACLs fails.

Please help me to fix this.
Or maybe it is not necessary? I *can* access shares. Why is this step 
even needed?

Klaus

Reposting this because there was no reaction.

Is it normal that share permissions cannot be set on an AD-DC?
Computer Management of Win7 connects to the DC, but aborts when I click 
on "shares".

The shares are accessible, and I can set ACLs in the file system, just 
not the share permissions. Is the default that everybody has full 
access? Then maybe I just don't need it anyway.

Am 18.04.2018 um 16:21 schrieb Klaus Hartnegg via samba:
> Following the wiki page Setting_up_a_Share_Using_Windows_ACLs
> windows shows me this error after clicking on Shares:
> 
> Disk Management could not start the Virtual Disk Service (VDS) on 
> 'COMPUTER'. This can happen if the remote computer does not support
VDS,
> or if a connection cannot be established because it was blocked by 
> Windows Firewall.
> 
> Tested on a new provisioned AD-DC server.
> I can use RSAT tools for configuring DNS, Users, and GPOs.
> Accessing shares and setting filesystem ACLs also works.
> Only setting share permissions fails.

Hi,

so you would like to restrict the access to the share definitions? E.g. only
"User1" should be able to access the Share "Private"?

Have you had a look at this documentation?
https://www.samba.org/samba/docs/using_samba/ch09.html
(This doc is quite old but should still apply).

We're running a seperate fileserver which is joined to the SAMDOM DC. Then
we're using
    valid users = @"SAMDOM\Domain Users"
to make sure that only domain members are able to access the share. Instead of
Domain Users it's also possible to just use a group or a specific user.

Hope that helps.

Von: Klaus Hartnegg via samba
Gesendet: Donnerstag, 26. April, 17:24
Betreff: [Samba] cannot set share permissions
An: samba at lists.samba.org


Reposting this because there was no reaction. Is it normal that share
permissions cannot be set on an AD-DC? Computer Management of Win7 connects to
the DC, but aborts when I click on "shares". The shares are
accessible, and I can set ACLs in the file system, just not the share
permissions. Is the default that everybody has full access? Then maybe I just
don't need it anyway. Am 18.04.2018 um 16:21 schrieb Klaus Hartnegg via
samba: > Following the wiki page Setting_up_a_Share_Using_Windows_ACLs >
windows shows me this error after clicking on Shares: > > Disk Management
could not start the Virtual Disk Service (VDS) on > 'COMPUTER'. This
can happen if the remote computer does not support VDS, > or if a connection
cannot be established because it was blocked by > Windows Firewall. > >
Tested on a new provisioned AD-DC server. > I can use RSAT tools for
configuring DNS, Users, and GPOs. > Accessing shares and setting filesystem
ACLs also works. > Only setting share permissions fails. -- To unsubscribe
from this list go to the following URL and read the instructions:
https://lists.samba.org/mailman/options/samba