search for: grouppolicies

Hi - I'm using samba to connect some windows boxen to a distributed set of unix machines. I'm trying to unify some of the administrative interfaces via mmc, specifically the group policy stuff. When I try to use the Group Policy snap-in to connect to my samba 2.2.1 servers, I see the windows box do a Tree Connect Andx to ADMIN$\System32\GroupPolicy, and then the samba box responds with

John, > I would like to figure out how to do this > gpedit.msc+AD+gpc+gpt magic for > win2k/xp with linux+samba(2.2/3.0/tng)+openldap and is it possible at > all? We use local (!) GPOs on our Win2k clients with great success: - log on to "master" workstation as administrator - create a link to the "C:\WINNT\system32\GroupPolicy" folder on your administrator's

Hi Louis, See below,  C:\>ipconfig /all Windows IP Configuration    Host Name . . . . . . . . . . . . : EBEN-TEST-PC    Primary Dns Suffix  . . . . . . . : domain.corp    Node Type . . . . . . . . . . . . : Hybrid    IP Routing Enabled. . . . . . . . : No    WINS Proxy Enabled. . . . . . . . : No    DNS Suffix Search List. . . . . . : domain.corp Ethernet adapter Local Area Connection:

Hello, I'm using a WIndows Server 2016 as a DC and Samba 4.5 (Debian Stretch) as a fileserver. The fileserver is made with Windows ACLs (exactly like the Samba tutorial). The Windows 10 Client cannot copy these 4 files: C:\Users\testuser\AppData\Local\Microsoft\Windows\UPPS\UPPS.bin -> UNC\FS\profiles\testuser.V6\AppData\Local\Microsoft\Windows\UPPS\UPPS.bin

Hi All, I create a Samba domain and works it's great, the issue that I have is with the GPO's.When applying GPO's then only the computer Policy is applied and not the user GPO. I keep on receiving below error. Has anybody else perhaps been experiencing the same issues? C:\>gpupdate /force Updating Policy... User policy could not be updated successfully. The following errors were

Hi Louis, I don't have a FW enabled on my PC. I even tried to disable the FW on my all my DC's I can telnet to port 389/636/53, they are all open and goes through to my all DC's. Primary DC # Global parameters [global] workgroup = DOMAIN realm = DOMAIN.CORP netbios name = ##SELECTION_END##ZACPRDC002 server role = active directory domain controller idmap_ldb:use rfc2307 = yes

new thread, old issue been fiddling off-list with tips from Louis over the last days, and putting it back to the list to ask for help from others: 2 samba-4.9.11 DCs 1 samba-4.8.12 DM file server GPOs not working cleanly anymore tried to resync completely etc etc - right now I test gpupdate/gpresult on an older (not productive) W2008R2 server which I use for editing stuff via RSAT/MMC I

Hello, I'm having one strange issue with latest stable Samba 4.0.4. I'm testing it as a domain controller for two virtual machines. The Samba AD DC is Debian stable, with two domain members - Windows XP Pro and trial Windows 8 Enterprise. User configuration using GPOs is working as expected. However, Computer configuration is never applied properly. Event logs show this entry: ------

Hai, Hai, Yes, thats correct that you see that. 2 things here. You missed something on this page : https://wiki.samba.org/index.php/Setting_up_a_Share_Using_POSIX_ACLs And try this settting in [global] of smb.conf : acl allow execute always = yes But why copy : C:\Users\testuser\AppData\Local Thats normaly not copied in the user profiles only C:\Users\testuser\AppData\Roaming Greetz,

Hi, AFAIK, the "logon path" parameter doesn't apply anymore in Samba 4. If you want roaming profiles you have to use profilePath user attribute. This works fine but I have an issue. In my environment we have multiple sites. Each one has its own DC and its own file server. We want to store the profile in the file server, but I couldn't fine a way to fine this. I have to do it

Hello Is it possible to create a samba logoff script. I currently use netlogon for a logonscript. I also want a logoff scipt to allow me to back certain files up once a user logs off. Is this possible? If so how? -- REGARDS, Andy

Dear Sébastien, Sorry for the delay, Please check on the log below. As for the word "存取被拒。" it should translate to Access Deny... Please help. - <Event xmlns="*http://schemas.microsoft.com/win/2004/08/events/event <http://schemas.microsoft.com/win/2004/08/events/event>*"> - <System> <Provider Name="*Microsoft-Windows-GroupPolicy*"

Hi all, Since I have upgraded to Samba 4.2.11 I got errors when updating group policy objects (GPO) on my clients (all Windows 7 Professional). When running "gpupdate" from the command line on Windows 7 Pro Domain-Joined clients it states not to be able to resolve the domain controller. According to what I see from the logs it looks like it's related to resolving accounts. I am

I'm trying to define the GPOs on my new AD domain, and i'm a little confused. I've never worked with AD, but i've extensively used MLGPO, where i can explicitly apply GPOs to users/groups. Two examples, of my confusion. 1) i've setup password policies (8 chars, 5-row password history, ...), and this is a ''computer'' policy, that apply... to computers. ;-)

What is the easiest way to allow normal users to install printers (which are available through a Samba server)? Normally, Windows 2000 and XP need to have a printer installed by the admin first on a given workstation - only the it can be used by the user. I want to allow the user to install own printers. Now, when one trises to right click on a printer on a server and "connect", he

Is there any reason to believe that a samba server would be slower when serving up roaming profiles than a real Windows server? I know roaming profiles are slow by nature and that there are things you can do to help like configuring ffolder redirection. But all else being equal, how would a samba server compare to a Windows server when it comes to speed specifically with respect to roaming

Hello Sébastien Le Ray, The PC reply the following... The processing of Group Policy failed. Windows could not resolve the user name. This could be caused by one or more of the following: a) Name Resolution failure on the current domain controller. b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller). The

Okay, I testet it and it doesn't help. Attached is also my smb.conf. May it is here. [global] security = ADS workgroup = EXAMPLE realm = EXAMPLE.LOCAL log file = /var/log/samba/%m.log log level = 1 # Default ID mapping configuration for local BUILTIN accounts # and groups on a domain member. The default (*) domain: # - must not

One more i found is : http://www.edugeek.net/forums/windows-7/145171-event-id-1053-group-policy.html But i dont expect that to be your problem, just do checkit. And review these steps https://www.dell.com/support/article/nl/nl/nldhs1/sln163816/troubleshooting-group-policy-processing-errors-in-an-active-directory-domain?lang=en I can type it all, but then you get more typo's ;-) Above

Hai, Not really a question for samba technical, but i can share this. No need for setting things on samba, that wont help a lot. Below is my setup and its just how you configure your pc's. This and almost all other "malware" is EASY to block, but it wil have impact on how your work. First, start with NEVER work/run as user with administrator rights. If one needs it, then not