search for: fileacc

...IOS-name is EXAMPLE and not the left-most part of the dns domain (SAMDOM)? Any ideas appreciated. Regards Davor Outcome from command ran on both the AD DC and a member server: AD DC: root at dc1:/usr/local/samba# id davor uid=3000023(davor) gid=100(users) groups=100(users),3000023(davor),3000020(fileacc-common),3000021(fileacc-home),3000009(BUILTIN\users) root at dc1:/usr/local/samba# getent passwd davor davor:*:3000023:100:Davor Vusir:/home/%D/%U:/bin/false root at dc1:/usr/local/samba# getent group 'Domain Users' domain users:x:100: Member server: admind at ostraaros:~$ id davor uid=111...

As an addendum to my original message (copied below), I have tried a couple of things and have found the following: Running a one line login script, eg net use * \\server\share with an echo command produces the following output: The syntax is incorrect. For help, type NET USE /? at the command prompt. Yet running the same script one the machine as soon after login as possible results in he

...ions are stored as extended attributes (the only ones I have edited), that it had something to do with this particular group. Digging some more I realise that the access group for the home share is with scope Domain Local and is not enumerated with winbind (getent group). This access group 'FileAcc-Home' was created with ADUC, so I first thought that that was creating this problem. So I deleted it and recreated it with samba-tool not paying attention to that it was created with scope Global (default in MS AD DS). And it worked: $ ssh -Y davor at dc1 davor at dc1's password: Welcom...