search for: pdcemul

Hi Rowland - thank you for replying. I have now demoted and removed the temporary DC with the intention of repeating the exercise from scratch later this week. It was a Ubuntu Server 18.04.1 and the smb.conf was very vanilla: [global] workgroup = ACASTA realm = ACASTA.INTRA netbios name = UBUNTU server role = active directory domain controller dns forwarder - 192.168.200.3 idmap_ldb:use rfc2307 =

...f | grep realm | tr -d "' " ` domain=`echo $realminfo | sed -n -E 's/realm=(.*)/\1/p' | tr A-Z a-z` privatedir=`smbd -b | grep "PRIVATE_DIR" | sed -n -E 's/PRIVATE_DIR:(.*)/\1/p' | xargs` sysvol=`cd $privatedir/..;pwd`/sysvol pdc=`samba-tool fsmo show | grep PdcEmulation | sed -n -E 's/PdcEmulationMasterRole owner: CN=NTDS Settings,CN=([^,]*),.*/\1/p'` peer=`ldbsearch --cross-ncs -H $privatedir/sam.ldb "(samAccountName=$pdc$)" | grep dNSHostName | sed -n -E 's/dNSHostName: (.*)/\1/p'` echo $peer mkdir /tmp/samba || echo touch /tmp/sa...

...correct - > there is no automatic sysvol replication? Therefore, I must replicate > my old DC sysvol to the new DC before transferring FMSO roles and > demoting the old DC?? You still need to manually sync Sysvol between DCs and you should also sync idmap.ldb from the DC holding the 'PdcEmulation' FSMO role to all other DCs Rowland Acasta Ltd - A Crown Commercial Service Supplier. CyberEssentials Certified QGCE013. Registered in England 6619191. 42 Pitt Street, Barnsley, S70 1BB. VAT Registered 934 6797 75.

...quot;' " ` > domain=`echo $realminfo | sed -n -E 's/realm=(.*)/\1/p' | tr A-Z a-z` > privatedir=`smbd -b | grep "PRIVATE_DIR" | sed -n -E 's/PRIVATE_DIR:(.*)/\1/p' | xargs` > sysvol=`cd $privatedir/..;pwd`/sysvol > > pdc=`samba-tool fsmo show | grep PdcEmulation | sed -n -E 's/PdcEmulationMasterRole owner: CN=NTDS Settings,CN=([^,]*),.*/\1/p'` > peer=`ldbsearch --cross-ncs -H $privatedir/sam.ldb "(samAccountName=$pdc$)" | grep dNSHostName | sed -n -E 's/dNSHostName: (.*)/\1/p'` > echo $peer > > mkdir /tmp/samba ||...