samba - Jul 2021 - How to create an user with isCriticalSystemObject or/and showInAdvancedViewOnly

I would like to hide an account at creation with isCriticalSystemObject or/and
showInAdvancedViewOnly.

If the command does not exist, maybe time to add?

For security reasons...

________________________________________
From: samba <samba-bounces at lists.samba.org> on behalf of Rowland Penny
via samba <samba at lists.samba.org>
Sent: Wednesday, July 21, 2021 19:13
To: samba at lists.samba.org
Subject: Re: [Samba] How to create an user with isCriticalSystemObject or/and
showInAdvancedViewOnly

On Wed, 2021-07-21 at 17:06 +0000, * Neustradamus * via samba
wrote:
> Hello all,
>
> I search the solution to create an user with:
> - isCriticalSystemObject
> - showInAdvancedViewOnly
>
> Possible options are TRUE or FALSE.
>
> Line code:
> samba-tool user create username
>
> Thanks in advance.
>
> Regards,
>
> Neustradamus
You don't normally add them, the system adds them if required,
so why do think you require them ?

Rowland



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

On Wed, 2021-07-21 at 17:29 +0000, * Neustradamus *
wrote:
> I would like to hide an account at creation with
> isCriticalSystemObject or/and showInAdvancedViewOnly.
> 
> If the command does not exist, maybe time to add?
> 
> For security reasons...
> 
I am fairly sure you cannot hide an individual AD object, I believe you
can stop a user from seeing certain AD objects, but you would have to
do this for every user. It also wouldn't stop anyone on a Unix domain
member (at least) from searching for them with ldap tools (ldapsearch
etc)

Rowland