samba - Jun 2024 - Adding group policy ability

Thanks a lot, Kees! :)

Any hint which package to download for Windows Server 2022?

Cheers,
Torsten


Am 19.06.2024 um 09:30 schrieb Kees van Vloten via
samba:
> 
> Op 19-06-2024 om 08:42 schreef lists--- via samba:
>> Good morning list :)
>>
>> currently I don't need a group policy, but maybe that will change
in
>> the future - so I'd like to install its ability right now.
>>
>> As far as I understand https://wiki.samba.org/index.php/Group_Policy I 
>> have to execute:
>> samba-tool gpo admxload -U Administrator
>> (and samba-tool gpo admxload -H ldap://dcXYZ.samdom.example.com -U 
>> Administrator on additional DCs).
> This will load Samba's ADMX files from where the distro installs them 
> onto sysvol. Handy for the settings Samba provides, but those are mainly 
> for GPOs on Linux.
>>
>> Not clear is:
>> which Microsoft's ADMX templates for which MS-Server version?
>> There're only MS-Windows Server 2016 and MS-Windows Server 2008/R2 
>> listed, but no eg. 2016, 2019 or 2022 ...
>> Plus another question on this: _if_ I have install the ADMX eg. for 
>> 2022, does I have to install those ADMX-versions on every MS quarterly 
>> H-update pack again?
> 
> You only need to cover the settings you are using in your GPOs with ADMX 
> files that define those settings. As long as you don't change your GPOs
> (and add new settings), there is no need to update the ADMX files.
> 
> If you use Windows tooling (admc) to? create GPOs, it will read the ADMX 
> files from your sysvol to create the UI. So not updating ADMX files 
> implies that you will never see the latest settings and hence you will 
> not use them :-)
> 
> I hard ever upgrade them.
> 
> - Kees.
> 
>>
>> Cheers,
>> Torsten
>>
>

Op 20-06-2024 om 06:10 schreef lists--- via samba:
> Thanks a lot, Kees! :)
>
> Any hint which package to download for Windows Server 2022?
The proper ADMX for your version of Windows are on Windows itself in 
C:\windows\PolicyDefinitions. You just copy the content of the directory 
(and subdirs) to your Sysvol share \Policies\PolicyDefinitions

- Kees.
>
> Cheers,
> Torsten
>
>
> Am 19.06.2024 um 09:30 schrieb Kees van Vloten via samba:
>>
>> Op 19-06-2024 om 08:42 schreef lists--- via samba:
>>> Good morning list :)
>>>
>>> currently I don't need a group policy, but maybe that will
change in
>>> the future - so I'd like to install its ability right now.
>>>
>>> As far as I understand
https://wiki.samba.org/index.php/Group_Policy
>>> I have to execute:
>>> samba-tool gpo admxload -U Administrator
>>> (and samba-tool gpo admxload -H ldap://dcXYZ.samdom.example.com -U 
>>> Administrator on additional DCs).
>> This will load Samba's ADMX files from where the distro installs
them
>> onto sysvol. Handy for the settings Samba provides, but those are 
>> mainly for GPOs on Linux.
>>>
>>> Not clear is:
>>> which Microsoft's ADMX templates for which MS-Server version?
>>> There're only MS-Windows Server 2016 and MS-Windows Server
2008/R2
>>> listed, but no eg. 2016, 2019 or 2022 ...
>>> Plus another question on this: _if_ I have install the ADMX eg. for
>>> 2022, does I have to install those ADMX-versions on every MS 
>>> quarterly H-update pack again?
>>
>> You only need to cover the settings you are using in your GPOs with 
>> ADMX files that define those settings. As long as you don't change 
>> your GPOs (and add new settings), there is no need to update the ADMX 
>> files.
>>
>> If you use Windows tooling (admc) to? create GPOs, it will read the 
>> ADMX files from your sysvol to create the UI. So not updating ADMX 
>> files implies that you will never see the latest settings and hence 
>> you will not use them :-)
>>
>> I hard ever upgrade them.
>>
>> - Kees.
>>
>>>
>>> Cheers,
>>> Torsten
>>>
>>
>

On 6/19/24 10:10 PM, lists--- via samba wrote:
> Thanks a lot, Kees! :)
>
> Any hint which package to download for Windows Server 2022?
I always just download the latest Windows ADMX templates. I believe they 
are backwards compatible with previous versions (don't quote me on that).

-- 
David Mulder
Labs Software Engineer, Samba
SUSE
1221 S Valley Grove Way, Suite 500
Pleasant Grove, UT 84062
(P)+1 385.208.2989
dmulder at suse.com
http://www.suse.com