search for: gpos

On Tue, 6 Feb 2018 15:03:16 -0400 Robert Marcano via samba <samba at lists.samba.org> wrote: > Thanks for the information, to use a default GPO was a simple way to > try to encourage someone to reproduce the problem. > > I already created new GPOs (this is a test domain) Using the default > filter for a new GPO, "Authenticated users", creating a new group for > the test clients and using that as the filter, checking it have the > right permissions (apply), checking every guide about applying GPO to > computers. Usin...

...>> On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >>>> Hello, >>>> >>>> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >>>> Kerberos (clean, not upgraded). I just wan to create/activating a >>>> simple GPOs. >>>> >>>> # Interactive logon: Do not require CTRL + ALT + DEL -> activate >>>> >>>> # Interactive login: Do not displa last user name -> activate >>> >>> >>> These look like machine level GPO. See the output of >&...

...18 01:44 PM, Micha Ballmann via samba wrote: >>>>> Hello, >>>>> >>>>> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >>>>> Kerberos (clean, not upgraded). I just wan to create/activating a >>>>> simple GPOs. >>>>> >>>>> # Interactive logon: Do not require CTRL + ALT + DEL -> activate >>>>> >>>>> # Interactive login: Do not displa last user name -> activate >>>> >>>> >>>> These look like machine level...

Who am I to say this? I am only a lowly user and would-be admin, but it seems to me that one of the most useful features of an AD environment, GPOs, is not fully trust-able under Samba because of instability and ensuing fear, before and after each update, related to sysvol and who knows what. I still love you, though.

...t; restrictions are that Samba can't handle? I'd also appreciate if someone >> could list which other GPO I cannot set successfully using RSAT. > > It seems to me that the FAQ is pretty clear. The paragraph you quoted from ends like this: > > "It [Samba] only serves GPOs via the SysVol share." > > From the above statement one can infer that the relevant Microsoft documentation should be consulted in order to know which GPOs are served via the SysVol share. Those, and only those, are the GPOs Samba serves. Any other GPOs that Microsoft products eventuall...

Try: http://samba.bigbird.es/doku.php?id=samba:sync-sysvol I would recommend one way sync always from PDC FSMO owner, as this is the machine the GPOs get created in by default. And of course : http://samba.bigbird.es/doku.php?id=samba:sync-idmap.ldb Regards. LP On 5 Dec 2023 at 13:47 +0100, Jakob Curdes via samba <samba at lists.samba.org>, wrote: > Hello, > > I am wondering whether I have all pieces together for a scenatio wi...

...wrote: > On Tue, 6 Feb 2018 15:03:16 -0400 > Robert Marcano via samba <samba at lists.samba.org> wrote: > >> Thanks for the information, to use a default GPO was a simple way to >> try to encourage someone to reproduce the problem. >> >> I already created new GPOs (this is a test domain) Using the default >> filter for a new GPO, "Authenticated users", creating a new group for >> the test clients and using that as the filter, checking it have the >> right permissions (apply), checking every guide about applying GPO to >> com...

...a samba <samba at lists.samba.org> wrote: > > > Is it normal for a fresh installation of Samba to have empty Default > > Domain Controllers Policy and Default Domain Policy? > > > > I've done 5 DC using Samba and the last three always had empty > > default gpos. > > > > (Using Ubuntu 16.04 and Samba 4.3,11) > > > > Thanks > > > > If you mean DCs that you join to a domain, then yes, you need to sync > sysvol to the new DCs > -- The trouble with common sense is that it is so uncommon. <Anonymous>

GPOs are not synchronized, because I'm going to delete the zentyal domain, how can I delete delete all GPOs from AD y sysvol? and start over [root at srv-cds ~]# samba-tool gpo del {31B2F340-016D-11D2-945F-00C04FB984F9} GPO {31B2F340-016D-11D2-945F-00C04FB984F9} is linked to containers ERROR(ldb):...

...l samba AD DCs, each with a different domain. Samba tool works fine for creating a brand new domain, but I haven't seen any functionality for manipulating the directory structure of a new domain. Specifically, I'd like to automate the creation of a standard set of OUs, security groups and GPOs. I'm wondering whether any/all of these three tasks can be accomplished by doing an LDIF export from an existing DC, changing the 'DC=' entries to match the new domain and then importing the LDIF? It has been well over 10 years since I last messed around with command line LDAP tools,...

...the_ou', but if it is an new OU off another OU, the full path must be given as 'OU=newOU,OU=otherOU' and the OU 'otherOU' must already exist. Yes, the schema will evolve, just as the Window AD schema does, but creating OU's will not change. > > As for application of GPOs, I think I'm going to go down a different > path. I'm going to move to using a configuration tool, probably > Puppet. There are a few reasons for this: > > - GPOs cannot easily be versioned in a SCM repository > - From what little I have learned about GPOs, it looks l...

Hello, I am wondering whether I have all pieces together for a scenatio with two DCs and GPOs being used. Obviously the GPOs need to be replicated between DCs, I use "osync" as per the samba wiki (https://wiki.samba.org/index.php/Bidirectional_Rsync/osync_based_SysVol_replication_workaround). In that documentation the sysvolreset command is issued every time on the second DC...

Hello, i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT Kerberos (clean, not upgraded). I just wan to create/activating a simple GPOs. # Interactive logon: Do not require CTRL + ALT + DEL -> activate # Interactive login: Do not displa last user name -> activate When im activating this Policys (no errors or something like that) nothing happend. I reboot two Domain Members (Windows 7). Still showing last username and CT...

...no via samba wrote: >> On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >>> Hello, >>> >>> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >>> Kerberos (clean, not upgraded). I just wan to create/activating a >>> simple GPOs. >>> >>> # Interactive logon: Do not require CTRL + ALT + DEL -> activate >>> >>> # Interactive login: Do not displa last user name -> activate >> >> >> These look like machine level GPO. See the output of >> >>   gpresult /v &...

...eb 2018 15:03:16 -0400 >> Robert Marcano via samba <samba at lists.samba.org> wrote: >> >>> Thanks for the information, to use a default GPO was a simple way to >>> try to encourage someone to reproduce the problem. >>> >>> I already created new GPOs (this is a test domain) Using the default >>> filter for a new GPO, "Authenticated users", creating a new group for >>> the test clients and using that as the filter, checking it have the >>> right permissions (apply), checking every guide about applying GPO to...

...18 1:42 PM, Robert Marcano via samba wrote: > On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >> Hello, >> >> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >> Kerberos (clean, not upgraded). I just wan to create/activating a >> simple GPOs. >> >> # Interactive logon: Do not require CTRL + ALT + DEL -> activate >> >> # Interactive login: Do not displa last user name -> activate > > > These look like machine level GPO. See the output of > >   gpresult /v > > Mine say that machine based...

I'm having problems with GPO in Samba 4.2.1 I created a GPO to Block Control Panel and applied in my Domain OU. In desktop client I typed "gpupdate /force" and appear a success message that to ask reboot my system. After rebuot the GPO don't work. Other GPOs as WSUS update, Wallpaper and others, don't work too. Following is the result of command: GPRESULT /H GPResult.html GPOs Applied Name Location Link Revision Default Domain Policy empresa.com.br AD (1), Sysvol (65535) GPOs Denied Name Location Link...

Hi! I have updated our server from Samba 4 alpha 17 to Samba 4.0.1. Everything seems to work fine after some reconfiguration, but our GPOs are not working anymore. Samba 4 alpha 17 was using ntvfs and the root partition with the sysvol share was mounted with "user_xattr" only in /etc/fstab. Samba 4.0.1 is now set to use s3fs and the root partition is mouted with "user_xattr,acl,barrier=1". After updating to the...

.... I hope that someone on this list can give me some help. I have migrated a Win2k AD to samba4 and copied SYSVOL as decribed in this post: https://lists.samba.org/archive/samba-technical/2011-October/080026.html Now I have the problem that only the builtin Administrator can sucessfull modify/add GPOs. Users which are assigned to the "domain admin" group can open/view GPOs but when trying to change anything an error message pops up stating that the user is not allowed to do it. Unfortunately the GPO does not work anymore afterwards and needs to be rebuild by the administrator. Any ide...

...> > On Tue, 6 Feb 2018 15:03:16 -0400 > Robert Marcano via samba <samba at lists.samba.org> wrote: > >> Thanks for the information, to use a default GPO was a simple way to >> try to encourage someone to reproduce the problem. >> >> I already created new GPOs (this is a test domain) Using the default >> filter for a new GPO, "Authenticated users", creating a new group for >> the test clients and using that as the filter, checking it have the >> right permissions (apply), checking every guide about applying GPO to >>...