search for: forensit

...the existing Samba server in place to Samba 4 with AD? Or is that going to be difficult with the old version of Linux running on the DC? Given the low user/PC count, perhaps it makes more sense just to build a new domain and join the PCs to it, migrating user profiles with a tool like [ https://www.forensit.com/domain-migration.html | ForensIT?s User Profile Wizard ] ? Does anyone have any experience with a similar upgrade? Thanks for your help, Steve

..."The following error occured attempting to joing the domain "hprs": The > > specified > > domain either does not exist or could not be contacted." > > > > This is odd. My old 4.8.2 Samba had no trouble joining Windows members and > > the > > ForensiT tool Transwiz was, in fact, able to determine the domain (using > > hprs) and contact it. > > > > Does anyone have any idea why I cannot join this Windows 10 computer to > > the new 4.18.8 Domain? > > > > Here's my DC smb.conf. Other than the printer configs,...

...i think) on this list said it was not possible with Samba3. Has that situation changed? I've also tried to use the moveuser.exe command, to no avail. It either claims that cannot find the account, or that the account already exists, and fails in both cases. The "profile wizard" from forensit fails when trying to determine if the accounts are using remote profiles. I'd appreciate any advise you can give me. (BTW, if there is a way to extract the password and machine account information from the AD, let me know!) Thanks, Zarrabeitia.

...going to >>>> Settings->Accounts->Add a Microsoft account. >>>> >>> > > I think I understand now, you want to change a local profile to a > domain profile (I don't think you can just link them), if so, have a > look here: > > http://www.forensit.com/downloads.html > > Rowland > I am not sure you understand him yet. Microsoft, similar to Google and Apple, offers various cloud services that can all be reached through one single account, see https://en.wikipedia.org/wiki/Microsoft_account for details. A Microsoft account to Window...

...rosoft account. >>>>>> >>>>>> >>>>> >>> I think I understand now, you want to change a local profile to a domain >>> profile (I don't think you can just link them), if so, have a look here: >>> >>> http://www.forensit.com/downloads.html >>> >>> Rowland >>> >>> I am not sure you understand him yet. Microsoft, similar to Google and >> Apple, offers various cloud services that can all be reached through one >> single account, see https://en.wikipedia.org/wiki/Microsof...

Yes I have provisioned the samba server as an Active Directory domain controller (I mentioned that in the first e-mail). The reason for linking the two is to provide easy access to additional MS services that won't be hosted internally (e.g. OneDrive, Skype, MS Store). Ultimately I am using this as a private domain at home to simplify device management but I want to continue be able to use

...ill it work then? I cannot find a documentation page on the wiki about [home]. thanks > You say that you ran a workgroup, did your clients leave the workgroup > before joining the domain ? I was mistaken, it was a NT4 domain. But yes we moved the clients from the old to the new domain using Forensit Migration Tool While doing other maintenance I found krb5-kdc system service being in error. Trying to start throws: Cannot open DB2 database '/etc/krb5kdc/principal': No such file or directory - while initializing database for realm WDC.MYDOMAIN.IT Is this a problem? During installation...

...count to that user profile. I do this by going to >>> Settings->Accounts->Add a Microsoft account. >>> >> I think I understand now, you want to change a local profile to a domain profile (I don't think you can just link them), if so, have a look here: http://www.forensit.com/downloads.html Rowland

Hi, I would have to join 7 computers (a mix of win 8, 8.1, 10 WKSs) to samba 4.7 AD DC. After I will have joined those workstations to samba AD DC I would like the users to experience a minimal disruption of their Desktops and profiles. The computers have never been registered to any domain before. Can their existing local user names be mirrored on the ADDC (samba)? Can their user profiles be

...is a special share that doesn't use 'path. There used to be something on the wiki about using '[home]' on a DC, I didn't know it had gone until you mentioned it ;-) > I was mistaken, it was a NT4 domain. > But yes we moved the clients from the old to the new domain using Forensit Migration Tool How did you create the domain ? > While doing other maintenance I found krb5-kdc system service being in error. Trying to start throws: > Cannot open DB2 database '/etc/krb5kdc/principal': No such file or directory - while initializing database for realm WDC.MYDOMAIN.IT...

...ser.dat. However, my understanding is that this file may contain lots of SIDs (i.e. domain SID, user SID, group SIDs, etc.) and from all I've read it's just mentioned the domain SID. Can anyone elaborate on this?? Another tool I've found (that appears to work in my test environment) is forensit.com's Transwiz tool; this is operated through logging into each workstation as an administrator, and then the tool guides you through choosing a local profile (the cached remote profile) to copy over to the new domain, with a specified new user. Has anyone had any experience of using this tool?...

...s->Accounts->Add a Microsoft account. >>>>> >>>>> >>>> >> I think I understand now, you want to change a local profile to a domain >> profile (I don't think you can just link them), if so, have a look here: >> >> http://www.forensit.com/downloads.html >> >> Rowland >> >> I am not sure you understand him yet. Microsoft, similar to Google and > Apple, offers various cloud services that can all be reached through one > single account, see https://en.wikipedia.org/wiki/Microsoft_account for > detai...

...I can?t risk this sort of thing when switching to the new server. I had a look at the Microsoft XP Support Tool called netdom.exe thinking that might let me more easily reregister a computer on the domain if that might be required, but I can?t get it to work. I?ve also seen a product called ForensIT User Profile Wizard, but I?m not sure if that would be of use in this situation. In any event, I?d prefer to get the new server configured so that no intervention is needed on any of the workstations. I?d appreciate some help with this. I?m (hopefully) probably missing something obvious!

Hey All: I've got a working samba/ldap domain with a PDC in a datacenter and a BDC in my local office. I'm not able to reliably join a windows XP Pro machine to the domain by specifying the PDC as a wins server. I get the following error 90% of the time or more, with no discernible patterns or errors in any logs: --------------------------------- The following error occurred attempting

...>>>>>>> >>>>>> >>>> I think I understand now, you want to change a local profile to a >>>> domain profile (I don't think you can just link them), if so, have a look >>>> here: >>>> >>>> http://www.forensit.com/downloads.html >>>> >>>> Rowland >>>> >>>> I am not sure you understand him yet. Microsoft, similar to Google and >>> Apple, offers various cloud services that can all be reached through one >>> single account, see https://en.wik...

another special situation ;-) old server at customer runs samba-4.5.15 (not that relevant for my questions but while I am at it ...) and is a "classic PDC" -> NT4 based Yes, I know, I should upgrade/migrate that domain to ADS. But that customer basically does not have financial power ;-) and I wait for my money for months every time I write an invoice. So I want to avoid

Hai Stefan, A heads up and few adviced changes/tips for you. smb.conf: realm = my.tld Change to realm = MY.TLD Try to set a REALM always in CAPS. Some programs rely on that. ( for example, MIT Kerberos expects realm in CAPS ) So prepair for 4.7 now already to save problems in future. These shares. > [netlogon] > path = /var/lib/samba/sysvol/my.tld/scripts > read only = No >

On Wed, 06 Dec 2023 09:45:13 -0500 Mark Foley via samba <samba at lists.samba.org> wrote: > I have provisioned a new DC with Samba 4.18.5. This DC is intended to > replace an older one in my AD domain. > > The old/current DC has a number of Group Policies set. Can I "rsync" > /var/lib/samba/sysvol/hprs.local/policies/ to my new >

...any GPO settings assigned expect domain defaults. How long did you wait the first time for the login and any windows event id's from that login? How did you migrate your users profiles. Just a copy past? Because as far i know thats not going to work. You need something like : https://www.forensit.com/domain-migration.html Or https://www.microsoft.com/en-us/download/details.aspx?id=19188 Or USMT http://technet.microsoft.com/en-us/library/dd560801(WS.10).aspx But in all three above, i dont use it. :-/ I configure everything in GPO, only 1 thing i have to do manualy, setup the email signi...

...nts->Add a Microsoft account. >>>>> I think I understand now, you want to change a local profile to a >>>>> domain profile (I don't think you can just link them), if so, have a look >>>>> here: >>>>> >>>>> http://www.forensit.com/downloads.html >>>>> >>>>> Rowland >>>>> >>>>> I am not sure you understand him yet. Microsoft, similar to Google and >>>> Apple, offers various cloud services that can all be reached through one >>>> single a...