On 01/09/2020 20:17, Peter Pollock wrote:> Thanks Rowland. > > I'll try out those changes tonight. > > The two cards are necessary because I this is my gateway machine. One > card connects to the internet router on 10.1.10.80 and the other > connect to the local lan.I personally do not think that is a good idea, we do not recommend using a DC as a fileserver, never mind using one as a gateway device. The more I hear about your setup, the more I think you should start again, this time using something like 'ad.kingschristian.org' (you appear to own 'kingschristian.org') for the AD domain, along with the '10.1' ip range. Your main problem would be the timing of all this, I don't know about you, but the start of September is the start of the new school year here in the UK. Rowland
We started school about a month ago. Timing is awful. I'm having to work around my own teaching schedule and the teachers doing their prep and everything else. I'm working on starting again. I simply only physically had two servers available when I put this together 4 years ago so I had no option but to use one DC as a fileserver and the other as the gateway. This week the servers seem to actually be talking to each other, but we have weird issues like one staff member can't access certain shares all of a sudden, even though she is in the right groups and the windows computers will randomly decide their trust relationship with the server has failed, even just when waking from sleep or from a lock screen. Zentyal made everything easier at first, especially when it came to allowing other users to do administration while I was on holiday, but I have had such a torrid time with it recently I don't think I'll go that route again! <http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> Virus-free. www.avg.com <http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> <#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2> On Tue, Sep 1, 2020 at 12:38 PM Rowland penny via samba < samba at lists.samba.org> wrote:> On 01/09/2020 20:17, Peter Pollock wrote: > > Thanks Rowland. > > > > I'll try out those changes tonight. > > > > The two cards are necessary because I this is my gateway machine. One > > card connects to the internet router on 10.1.10.80 and the other > > connect to the local lan. > > I personally do not think that is a good idea, we do not recommend using > a DC as a fileserver, never mind using one as a gateway device. > > The more I hear about your setup, the more I think you should start > again, this time using something like 'ad.kingschristian.org' (you > appear to own 'kingschristian.org') for the AD domain, along with the > '10.1' ip range. > > Your main problem would be the timing of all this, I don't know about > you, but the start of September is the start of the new school year here > in the UK. > > Rowland > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >
Tried the changes. Failed miserably. It is the Zentyal DNS module which seems to be causing all the issues, but I can't find any log of what the issues are, it just hangs on trying to start. I guess this weekend I'm building a new domain and transferring everything over! <http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> Virus-free. www.avg.com <http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> <#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2> On Tue, Sep 1, 2020 at 12:38 PM Rowland penny via samba < samba at lists.samba.org> wrote:> On 01/09/2020 20:17, Peter Pollock wrote: > > Thanks Rowland. > > > > I'll try out those changes tonight. > > > > The two cards are necessary because I this is my gateway machine. One > > card connects to the internet router on 10.1.10.80 and the other > > connect to the local lan. > > I personally do not think that is a good idea, we do not recommend using > a DC as a fileserver, never mind using one as a gateway device. > > The more I hear about your setup, the more I think you should start > again, this time using something like 'ad.kingschristian.org' (you > appear to own 'kingschristian.org') for the AD domain, along with the > '10.1' ip range. > > Your main problem would be the timing of all this, I don't know about > you, but the start of September is the start of the new school year here > in the UK. > > Rowland > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >
Am 02.09.20 um 08:21 schrieb Peter Pollock via samba:> I guess this weekend I'm building a new domain and transferring everything > over!Keep in Mind that this way all your PCs need to rejoin the domain and all user profiles will need to be recreated! It is not enough that the name is the same. There ways to import these but they involve changing the domain SID in every profile. I thought you should keep that in mind. regards Christian -- Dr. Christian Naumer Unit Head Bioprocess Development B.R.A.I.N Aktiengesellschaft Darmstaedter Str. 34-36, D-64673 Zwingenberg e-mail cn at brain-biotech.com, homepage www.brain-biotech.com fon +49-6251-9331-30 / fax +49-6251-9331-11 Sitz der Gesellschaft: Zwingenberg/Bergstrasse Registergericht AG Darmstadt, HRB 24758 Vorstand: Adriaan Moelker (Vorstandsvorsitzender), Manfred Bender Aufsichtsratsvorsitzender: Dr. Georg Kellinghusen