search for: cc758426

Hi, if you use the UNIX attributes the primary group is ignored if you use winbind and the primary group of the AD attributes is used. So every user has the "Domain Users" group as primary group. I also read that you are not supposed to change the AD primary group to another than "Domain Users". Is there a way to set the UNIX primary group to another group without causing

...to another group without causing trouble in Windows? Perhaps > create a group which is member of the "Domain Users" and make this > the primary AD group? Read this: https://technet.microsoft.com/en-us/library/cc776334%28v=ws.10%29.aspx and https://technet.microsoft.com/en-us/library/cc758426%28v=ws.10%29.aspx We use often other primary groups for several reasons. Important is: 1. Sync unix and windows primary group manually. Make admins life easier in mixed environments. 2. Each user should be member of "Domain Users". At least as secondary group. -- Regards Har...