search for: dsquery

...rename it. Being a member of the right groups decite what >an account can do. >However, I don't understand how renaming the admin account improves the >security. For example, every domain user can easily find out who is a >member of the "Domain Admins" group: >> dsquery group -name "Domain Admins" | dsget group -members "CN=DomAdm,CN=Users,DC=samdom,DC=example,DC=com" >Regards, >Marc Hi Marc,   I agree that is not the holy grail of security, but as an average user is not able to do a dsquery, it has some added value. My customer asked...

Hi all,   Renaming the admin account in Windows server context is a popular measure to make the network more safe.  Can we do this also in Samba 4? Are there any negative consequences?   Met Vriendelijke Groet, Kind Regards, Salutations,     Bart Coninckx Bits 'n Tricks BVBA   Hoge Mierdse Heide 182 2360 Oud-Turnhout tel. +32 14 480 820 gsm +32 478 88 33 08 info at bitsandtricks.com

...is a little more complicated. Each school has it own OU. Therefor, the Windows admins created a path that is similar to this \\server\"OUname"\"username" The problem is there are 10000 students divided between 30 OUs. Thanks in advance. ------------------- You need to get dsquery and dsget , should be part of the "bonus pack" of Win2003 Server, then you can create queries like following dsquery user -samid $uid|dsget user -hmdir and you get that: $uid stands for accountname \\$server\userdirs$\$username Or dsquery user -name $user_name*|dsget user -hmdir...

Guys needing some help with LDAP queries against samba4 this command works against MS AD's LDAP (&(objectCategory=person)(objectClass=user)(mail=*)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) but with samba4 I get C:\Users\Administrator>dsquery * --filter (&(objectCategory=person)(objectClass=user)(mail=*)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) I get the error message as below (objectClass was unexpected at this time. it seams that filtering doesn't work anybody else got any experience with this ? -- Damien Dye IT...

...he same mapping, but I do not think it is guarantied. I think the fact that I do a wbinfo -u and wbinfo -g as part of the setup and there have been no users/groups added to active directory has made the mappings the same. I know that the uid/gid are not being store in active directory(I did a 'dsquery * -scope base -attrib *' on my id in active directory). Is there any way to guaranty the RID to uid/gid mapping across several servers? Thanks, Reece Dike Here is my smb.conf [global] workgroup = MYDOMAIN server string = Samba Server Version %v security = ADS password server =...

...ble floating point exceptions. mscoree: Implement RequestRuntimeLoadedNotification. mscoree: Update Wine Mono to 4.7.1. mscoree: Fix locking in GetRuntimeHost. Zebediah Figura (4): wincodecs: Add encoder options for JPEG. include: Add initial IDL for cmnquery.h. dsquery: Add stub DLL. dsquery: Add stub implementation of ICommonQuery. -- Alexandre Julliard julliard at winehq.org

...synch-l1-2-1: Add dll. mfidl.idl: Add interfaces IMFClockStateSink, IMFGetService. dxva2api.idl: Add interface IDirectXVideoMemoryConfiguration. evr: Add interface definitions for EVR filter. comctl32/tests: Dump failed message sequence correctly. François Gouget (7): dsquery: Case fixes. ieproxy: Case fixes. mshtml: A spelling fix in a WARN() message. mshtml: Make HTMLDocumentNode_init_dispex_info() static. dwrite: Factory_release_cached_fontface() is unused so remove it. webservices: Alloc_utf16_text() is unused, so remove it. gdipl...

...c: Build with msvcrt. dmusic32: Build with msvcrt. dplayx: Build with msvcrt. dpnet: Build with msvcrt. dpnhpast: Build with msvcrt. dpvoice: Build with msvcrt. dpwsockx: Build with msvcrt. drmclien: Build with msvcrt. dsound: Build with msvcrt. dsquery: Build with msvcrt. dssenh: Build with msvcrt. dswave: Build with msvcrt. dwmapi: Build with msvcrt. dx8vb: Build with msvcrt. dxdiagn: Build with msvcrt. dxva2: Build with msvcrt. esent: Build with msvcrt. explorerframe: Build with msvcrt. faul...

Try verifying kvno from the client that gives the error message. That kvno = 2 for dc$ must've come from somewhere. You can also double check e.g. via ADUC ldap attributes of the dc$: lastpwdset and kvno. If  kvno is definately 1 that means that client connecting has some error, if it's 2, than it means that dc has outdated keytab. And if it's the former, than I really am not sure